7611fb9d76
* add dehydrated role with pdns-api.sh support * Minor changes to Readme * Remove Meta * move dehydrated to linse * Remove Zuckerwatte from PR (nothing to do with dehydrated) * Add other domains to dehydrated config, added hook_chain * Add authorized keys for cert user, add structures in /home/cert/ for checking out certs * Send dehydrated ouput to /dev/null * user authorized_keys module, add kumpir key * Fix typo. Use \\n for each ssh-key * remove unnecessary .ssh creation (done by authorized_key module) * Added wrapper script to execute two hooks: pdns_api.sh + deploy certificates * Remove challengetype variable, as only dns-01 is supported anyway. * Add freifunk-mainz.de domain * fix cert deploy script.
21 lines
626 B
YAML
21 lines
626 B
YAML
---
|
|
dehydrated_dependencies:
|
|
- git
|
|
- openssl
|
|
- curl
|
|
dehydrated_repo_url: https://github.com/lukas2511/dehydrated.git
|
|
dehydrated_install_root: /opt/dehydrated
|
|
dehydrated_update: yes
|
|
dehydrated_version: HEAD
|
|
dehydrated_key_algo: rsa
|
|
dehydrated_keysize: 4096
|
|
dehydrated_ca: "https://acme-v02.api.letsencrypt.org/directory"
|
|
dehydrated_cronjob: yes
|
|
dehydrated_run_on_changes: yes
|
|
dehydrated_systemd_timer: no
|
|
dehydrated_hook_scripts: []
|
|
dehydrated_cert_config: []
|
|
# dehydrated_systemd_timer_onfailure: some_unit.service
|
|
pdns_api_version: HEAD
|
|
pdns_api_repo_url: https://github.com/silkeh/pdns_api.sh.git
|
|
pdns_api_update: yes
|