rilla
/
dags
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
dags/narwhal/acme_renew
History
Ricard Illa 817d265a33 feat: sync and trigger LB 2023-05-30 17:40:37 +02:00
..
Makefile feat: sync and trigger LB 2023-05-30 17:40:37 +02:00
README.md rework structure 2022-10-18 17:01:08 +02:00
justfile migrated DNS provider from linode to hetzner 2023-05-28 18:16:52 +02:00
run.sh added run.sh wrappers 2022-10-18 17:58:09 +02:00

README.md

acme renew

This DAG renews wildcard certificates using acme.sh.

If a renewal happens, reload the nginx instance and deploy certificates to the PostgreSQL instance.

The Nginx instance has the actual certificate files mounted as read-only mounts, so it doesn't need any explicit deployment, just a reload.

PostgreSQL complains if the certificates are mounted as read-only, so I opted for making a copy of the files to volume used by PostgreSQL because I don't like mouting the actual original files with write permissions to any container other than the acme.sh one. On the other hand, PostgreSQL doesn't need to be reloaded to pick the new files.