websites/pyrocufflink: Switch to mod_md for cert
The _pyrocufflink.net_ site now obtains its certificate from Let's Encrypt using the Apache _mod_md_ (managed domain) module. This dramatically simplifies the deployment of this certificate, eliminating the need for _cert-manager_ to obtain it, _cert-exporter_ to add it to _certs.git_, and Jenkins to push it out to the web server.
parent
29cdafac2a
commit
68e9f5e6a1
|
@ -1 +0,0 @@
|
||||||
../lego/_.pyrocufflink.net.crt
|
|
|
@ -1 +0,0 @@
|
||||||
../lego/_.pyrocufflink.net.key
|
|
|
@ -1,9 +0,0 @@
|
||||||
dependencies:
|
|
||||||
- role: cert
|
|
||||||
vars:
|
|
||||||
cert_src: websites/pyrocufflink.net.cer
|
|
||||||
cert_dest: /etc/pki/tls/certs/pyrocufflink.net.cer
|
|
||||||
cert_key_src: websites/pyrocufflink.net.key
|
|
||||||
cert_key_dest: /etc/pki/tls/private/pyrocufflink.net.key
|
|
||||||
tags:
|
|
||||||
- websites/pyrocufflink.net
|
|
|
@ -1,4 +1,5 @@
|
||||||
# vim: set sw=4 ts=4 sts=4 et :
|
# vim: set sw=4 ts=4 sts=4 et :
|
||||||
|
MDomain pyrocufflink.net
|
||||||
|
|
||||||
<VirtualHost _default_:80>
|
<VirtualHost _default_:80>
|
||||||
ServerName pyrocufflink.net
|
ServerName pyrocufflink.net
|
||||||
|
@ -10,9 +11,8 @@
|
||||||
|
|
||||||
<VirtualHost _default_:443>
|
<VirtualHost _default_:443>
|
||||||
ServerName pyrocufflink.net
|
ServerName pyrocufflink.net
|
||||||
|
ServerAlias www.pyrocufflink.net
|
||||||
Include conf.d/ssl.include
|
Include conf.d/ssl.include
|
||||||
SSLCertificateFile /etc/pki/tls/certs/pyrocufflink.net.cer
|
|
||||||
SSLCertificateKeyFile /etc/pki/tls/private/pyrocufflink.net.key
|
|
||||||
|
|
||||||
ProxyRequests Off
|
ProxyRequests Off
|
||||||
RewriteEngine On
|
RewriteEngine On
|
||||||
|
|
Loading…
Reference in New Issue