removed unused DAG

main
Ricard Illa 2022-09-16 16:16:44 +02:00
parent c320d1f084
commit f2d47f9e97
2 changed files with 0 additions and 80 deletions

View File

@ -1,73 +0,0 @@
WD=/var/lib/dags/rsync_letsencrypt
SYNC=$(WD)/synced_files
NGINX_RELOAD=$(WD)/nginx_reload
.PHONY: all refresh_pg force
all: $(SYNC) $(NGINX_RELOAD) refresh_pg
LETSENCRYPT_PATH=/mnt/letsencrypt
###############################################################################
# Fetch the certificates from my remote server using rsync
#
# The combination of `--info=NAME` and pipe into `ifne tee` means this target will
# be updated only if new files have been synced.
# If new files have been synced, their paths will be stored to the target.
# This way, the other targets will run only when some certificate has been
# updated.
#
# This target depends on the PHONY requirement `force` so that it always runs
REMOTE_LETSENCRYPT_PATH=rsync://user@caladan/letsencrypt
RSYNCD_PASSWD=/mnt/secrets/rsyncd_password
RSYNC_OPTS=--archive --delete --acls --xattrs --compress --human-readable
$(SYNC): force
mkdir -p $(@D)
rsync \
$(RSYNC_OPTS) \
--info=NAME \
--password-file=$(RSYNCD_PASSWD) \
$(REMOTE_LETSENCRYPT_PATH) \
$(LETSENCRYPT_PATH) | \
ifne tee $@
###############################################################################
# Reload the nginx instance running on my reverse proxy docker-compose service
# so that it uses the new certificates.
# The target is just an empty sentinel target with no meaningful data other
# than its modification date
NGINX_COMPOSE_FILE=/srv/services/reverse_proxy/docker-compose.yml
$(NGINX_RELOAD): $(SYNC)
mkdir -p $(@D)
docker-compose \
--file $(NGINX_COMPOSE_FILE) \
exec nginx \
nginx -s reload
touch $@
###############################################################################
# Copy the certificate for the postgresql domain to the folder where postgre
# service expects it
# After running the fetch_certs target, the postgresql fullchain.pem and
# privkey.pem should be available. Copy those to the postgre SSL folder.
PG_DOMAIN=pg.monotremata.xyz
PG_SSL_PATH=/mnt/docker_volumes/postgres/ssl
$(LETSENCRYPT_PATH)/live/$(PG_DOMAIN)/fullchain.pem: $(SYNC)
$(LETSENCRYPT_PATH)/live/$(PG_DOMAIN)/privkey.pem: $(SYNC)
$(PG_SSL_PATH)/server.crt: $(LETSENCRYPT_PATH)/live/$(PG_DOMAIN)/fullchain.pem
mkdir -p $(@D)
rsync --copy-links $< $@
$(PG_SSL_PATH)/server.key: $(LETSENCRYPT_PATH)/live/$(PG_DOMAIN)/privkey.pem
mkdir -p $(@D)
rsync --copy-links $< $@
refresh_pg: $(PG_SSL_PATH)/server.crt $(PG_SSL_PATH)/server.key

View File

@ -1,7 +0,0 @@
# rsync letsencrypt
This DAG pulls my letsencrypt certificates from my public server that issues
and renews them using rsync.
If any certificate has been updated, it reloads my Nginx reverse proxy
instance and updates the certificates for my PostgreSQL instance.