Page MenuHomeDevCentral
Files F12298084

No OneTemporary
Actions

View Options

diff --git a/roles/paas-docker/letsencrypt/init.sls b/roles/paas-docker/letsencrypt/init.sls
new file mode 100644
index 0000000..657f07a
--- /dev/null
+++ b/roles/paas-docker/letsencrypt/init.sls
@@ -0,0 +1,41 @@
+# -------------------------------------------------------------
+# Salt — Provision Docker engine
+# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+# Project: Nasqueron
+# Created: 2018-03-16
+# License: Trivial work, not eligible to copyright
+# -------------------------------------------------------------
+
+{% set has_selinux = salt['grains.get']('selinux:enabled', False) %}
+
+# -------------------------------------------------------------
+# See also
+# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+
+# Wrapper script
+# - wrappers/init.Sls
+# - wrappers/files/certbot.sh
+#
+# Image
+# - /pillar/paas/docker.Sls
+#
+# Nginx configuration
+# - nginx/files/includes/letsencrypt
+
+# -------------------------------------------------------------
+# Data directory
+# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+
+/srv/letsencrypt:
+ file.directory
+
+{% if has_selinux %}
+selinux_context_jenkins_home:
+ selinux.fcontext_policy_present:
+ - name: /srv/letsencrypt
+ - sel_type: svirt_sandbox_file_t
+
+selinux_context_jenkins_home_applied:
+ selinux.fcontext_policy_applied:
+ - name: /srv/letsencrypt
+{% endif %}
diff --git a/roles/paas-docker/wrappers/files/certbot.sh b/roles/paas-docker/wrappers/files/certbot.sh
index f323182..fcccc86 100755
--- a/roles/paas-docker/wrappers/files/certbot.sh
+++ b/roles/paas-docker/wrappers/files/certbot.sh
@@ -1,23 +1,23 @@
#!/bin/sh
# -------------------------------------------------------------
# PaaS Docker
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
# Project: Nasqueron
# Created: 2018-03-15
# License: Trivial work, not eligible to copyright
# Source file: roles/paas-docker/wrappers/files/certbot.sh
# -------------------------------------------------------------
#
# <auto-generated>
# This file is managed by our rOPS SaltStack repository.
#
# Changes to this file may cause incorrect behavior
# and will be lost if the state is redeployed.
# </auto-generated>
docker run -it --rm \
- -v /data/letsencrypt/etc:/etc/letsencrypt \
- -v /data/letsencrypt/var:/var/lib/letsencrypt \
- -v /data/letsencrypt/www:/www \
+ -v /srv/letsencrypt/etc:/etc/letsencrypt \
+ -v /srv/letsencrypt/var:/var/lib/letsencrypt \
+ -v /srv/letsencrypt/www:/www \
certbot/certbot:latest "$*"

File Metadata

Mime Type
text/x-diff
Expires
Wed, Oct 22, 13:57 (1 d, 57 m)
Storage Engine
blob
Storage Format
Raw Data
Storage Handle
3092299
Default Alt Text
(2 KB)

Event Timeline

Nasqueron DevCentral · If it had been much bigger the moon would have had a core of ice. · Powered by Phabricator