freifunk/ansible-config
0
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Forward Let's Encrypt challenges for updates from srv03 to srv02

Browse source
This commit is contained in:
Alexander Dietrich 2017-04-07 20:54:58 +02:00
parent acf416f7ef
commit 81ccb6e583
5 changed files with 15 additions and 4 deletions
roles
nginx/files/etc/nginx/include
letsencrypt_srv02.conf
website/updates
defaults
main.yml
templates
site.j2

5
roles/nginx/files/etc/nginx/include/letsencrypt_srv02.conf Normal file
View file

@ -0,0 +1,5 @@
location ^~ /.well-known/acme-challenge {
proxy_set_header Host $host;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_pass http://srv02.hamburg.freifunk.net$request_uri;
}

5
roles/website/updates/defaults/main.yml
View file

@ -1,4 +1,5 @@
---
letsencrypt_srv02: false
site: updates
ssl_certificate: /etc/letsencrypt/live/updates.hamburg.freifunk.net/fullchain.pem
ssl_certificate_key: /etc/letsencrypt/live/updates.hamburg.freifunk.net/privkey.pem
updates_ssl_certificate: /etc/letsencrypt/live/updates.hamburg.freifunk.net/fullchain.pem
updates_ssl_certificate_key: /etc/letsencrypt/live/updates.hamburg.freifunk.net/privkey.pem

4
roles/website/updates/templates/site.j2
View file

@ -27,6 +27,10 @@ server {
location / {
include /etc/nginx/include/listing.conf;
}
{% if letsencrypt_srv02 %}
include /etc/nginx/include/letsencrypt_srv02.conf;
{% endif %}
}
server {