rilla
/
dags
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

simplified certs setup

main
Ricard Illa 2022-09-16 16:27:15 +00:00
parent 508299d038
commit ce19ab550f
1 changed files with 11 additions and 12 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

23
acme_rsync_fugu/Makefile
View File

@ -14,32 +14,31 @@ all: sync_certs $(SMTPD_RESTART) $(DOVECOT_RELOAD)
############################################################################### ###############################################################################
CERTS_PATH=/srv/certs/acme ACME_DIR=/srv/certs/acme
DOMAIN=monotremata.xyz
MONOTREMATA_DOMAIN=monotremata.xyz CERT_PATH=$(ACME_DIR)/$(DOMAIN)
MONOTREMATA_PATH=$(CERTS_PATH)/$(MONOTREMATA_DOMAIN) CERT=$(CERT_PATH)/fullchain.cer
MONOTREMATA_CERT=$(MONOTREMATA_PATH)/fullchain.cer KEY=$(CERT_PATH)/$(DOMAIN).key
MONOTREMATA_KEY=$(MONOTREMATA_PATH)/$(MONOTREMATA_DOMAIN).key
############################################################################### ###############################################################################
# Sync the certificates using rsync. Because `sync` is a phony # Sync the certificates using rsync. Because `sync` is a phony
# target, it will be run each time, but the certificate files will only be # target, it will be run each time, but the certificate files will only be
# updated if a renewal happens # updated if a renewal happens
$(MONOTREMATA_CERT): $(SYNC_CERTS) $(CERT): $(SYNC_CERTS)
$(MONOTREMATA_KEY): $(SYNC_CERTS) $(KEY): $(SYNC_CERTS)
REMOTE_ACME_PATH=rsync://user@narwhal/acme REMOTE_ACME_PATH=rsync://user@narwhal/acme
RSYNCD_PASSWD=/srv/secrets/rsyncd_password RSYNCD_PASSWD=/srv/secrets/rsyncd_password
RSYNC_OPTS=--archive --delete --compress --verbose --human-readable RSYNC_OPTS=--archive --delete --compress --verbose --human-readable
sync_certs: sync_certs:
mkdir -p $(CERTS_PATH) mkdir -p $(ACME_DIR)
rsync \ rsync \
$(RSYNC_OPTS) \ $(RSYNC_OPTS) \
--password-file=$(RSYNCD_PASSWD) \ --password-file=$(RSYNCD_PASSWD) \
$(REMOTE_ACME_PATH) \ $(REMOTE_ACME_PATH) \
$(CERTS_PATH) $(ACME_DIR)
############################################################################### ###############################################################################
@ -47,10 +46,10 @@ SSL_PATH=/etc/ssl
CERT_DEST=$(SSL_PATH)/monotremata.xyz.fullchain.pem CERT_DEST=$(SSL_PATH)/monotremata.xyz.fullchain.pem
KEY_DEST=$(SSL_PATH)/private/monotremata.xyz.key KEY_DEST=$(SSL_PATH)/private/monotremata.xyz.key
$(CERT_DEST): $(MONOTREMATA_CERT) $(CERT_DEST): $(CERT)
install -m 444 $< $@ install -m 444 $< $@
$(KEY_DEST): $(MONOTREMATA_KEY) $(KEY_DEST): $(KEY)
install -m 400 $< $@ install -m 400 $< $@
############################################################################### ###############################################################################