summaryrefslogtreecommitdiff
path: root/roles/web/files
diff options
context:
space:
mode:
authorDmitry Ilvokhin <d@ilvokhin.com>2023-12-21 18:08:22 +0000
committerDmitry Ilvokhin <d@ilvokhin.com>2023-12-21 18:08:22 +0000
commit98deb6b468c52d09c69c699b02ab16791f557beb (patch)
tree3dd114dfd79a81f577c0ffa93e8bf3bd06d70759 /roles/web/files
parent1fe154b136bce2fb063e39050d9bc0deb2279bb0 (diff)
downloadinfra-98deb6b468c52d09c69c699b02ab16791f557beb.tar.gz
infra-98deb6b468c52d09c69c699b02ab16791f557beb.tar.bz2
infra-98deb6b468c52d09c69c699b02ab16791f557beb.zip
Enable certbot for certificates renewal
Diffstat (limited to 'roles/web/files')
-rw-r--r--roles/web/files/certbot/certbot.service6
-rw-r--r--roles/web/files/certbot/certbot.timer10
-rw-r--r--roles/web/files/nginx/nginx.conf (renamed from roles/web/files/nginx.conf)0
-rw-r--r--roles/web/files/nginx/nginx.logrotate (renamed from roles/web/files/nginx)0
4 files changed, 16 insertions, 0 deletions
diff --git a/roles/web/files/certbot/certbot.service b/roles/web/files/certbot/certbot.service
new file mode 100644
index 0000000..bea307c
--- /dev/null
+++ b/roles/web/files/certbot/certbot.service
@@ -0,0 +1,6 @@
+[Unit]
+Description=Let's Encrypt renewal
+
+[Service]
+Type=oneshot
+ExecStart=/usr/bin/certbot renew --agree-tos --deploy-hook "systemctl reload nginx"
diff --git a/roles/web/files/certbot/certbot.timer b/roles/web/files/certbot/certbot.timer
new file mode 100644
index 0000000..565b4ee
--- /dev/null
+++ b/roles/web/files/certbot/certbot.timer
@@ -0,0 +1,10 @@
+[Unit]
+Description=Renewal of Let's Encrypt's certificates
+
+[Timer]
+OnCalendar=daily
+OnCalendar=0/12:12:00
+Persistent=true
+
+[Install]
+WantedBy=timers.target
diff --git a/roles/web/files/nginx.conf b/roles/web/files/nginx/nginx.conf
index ce8302d..ce8302d 100644
--- a/roles/web/files/nginx.conf
+++ b/roles/web/files/nginx/nginx.conf
diff --git a/roles/web/files/nginx b/roles/web/files/nginx/nginx.logrotate
index da8ba47..da8ba47 100644
--- a/roles/web/files/nginx
+++ b/roles/web/files/nginx/nginx.logrotate