[certbot] Fix certificates for auro.re

Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-24 13:57:59 +01:00 · 2021-02-24 13:57:59 +01:00 · ba6da939ab
commit ba6da939ab
parent ce821cbb1a
2 changed files with 9 additions and 1 deletions
--- a/host_vars/proxy-ovh.adm.auro.re.yml
+++ b/host_vars/proxy-ovh.adm.auro.re.yml
@ -1,4 +1,12 @@
 ---
+loc_certbot:
+  - dns_rfc2136_server: '10.128.0.30'
+    dns_rfc2136_name: certbot_challenge.
+    dns_rfc2136_secret: "{{ vault_certbot_dns_secret }}"
+    mail: tech.aurore@lists.crans.org
+    certname: auro.re
+    domains: "auro.re, *.auro.re"
+
 loc_reverseproxy:
  redirect_sites:
    - from: www.auro.re
--- a/roles/certbot/tasks/main.yml
+++ b/roles/certbot/tasks/main.yml
@ -28,7 +28,7 @@
  file:
    path: /etc/letsencrypt/conf.d
    state: directory
-    mode: 0644
+    mode: 0755

 - name: Add Certbot configuration
  template: