AniNIX/Kapisi
3
0
Fork 0
Code Issues 31 Pull Requests 1 Projects 1 Releases Wiki Activity

Moving LetsEncrypt to ClouDNS API validation -- some LetsEncrypt queries come from non-US origins.

Browse Source
This commit is contained in:
DarkFeather
2026-01-13 02:10:33 -06:00
parent 0070afde5d
commit 0084b4ea19
4 changed files with 47 additions and 20 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
roles/SSL/templates/certbot.conf.j2 Normal file
View File

@@ -0,0 +1,2 @@
dns_cloudns_auth_id={{ secrets.certbot.authid }}
dns_cloudns_auth_password={{ secrets.certbot.passphrase }}

12
roles/SSL/templates/certbot.service.j2 Executable file
View File

@@ -0,0 +1,12 @@
[Unit]
Description=Certbot
[Service]
ExecStart=/bin/bash -c "source /etc/certbot/venv/bin/activate; certbot renew --authenticator dns-cloudns --dns-cloudns-credentials /etc/certbot/certbot.conf --dns-cloudns-nameserver {{ secrets.certbot.nameserver }}"
ExecStartPost=-/usr/bin/systemctl reload nginx
ExecStartPost=-/usr/bin/systemctl reload inspircd
KillMode=process
Type=oneshot
RemainAfterExit=no
User=root
Group=root