ansible-ffibk/roles/service-dehydrated/templates/config.j2
prisma01 7611fb9d76
add dehydrated role with pdns-api.sh support (#25)
* add dehydrated role with pdns-api.sh support

* Minor changes to Readme

* Remove Meta

* move dehydrated to linse

* Remove Zuckerwatte from PR (nothing to do with dehydrated)

* Add other domains to dehydrated config, added hook_chain

* Add authorized keys for cert user, add structures in /home/cert/ for checking out certs

* Send dehydrated ouput to /dev/null

* user authorized_keys module, add kumpir key

* Fix typo. Use \\n for each ssh-key

* remove unnecessary .ssh creation (done by authorized_key module)

* Added wrapper script to execute two hooks: pdns_api.sh + deploy certificates

* Remove challengetype variable, as only dns-01 is supported anyway.

* Add freifunk-mainz.de domain

* fix cert deploy script.
2019-09-08 20:44:26 +02:00

14 lines
481 B
Django/Jinja

#jinja2: trim_blocks: True, lstrip_blocks: True
CA="{{ dehydrated_ca }}"
CHALLENGETYPE="dns-01"
CONTACT_EMAIL="{{ dehydrated_contactemail | mandatory }}"
KEY_ALGO={{ dehydrated_key_algo }}
KEYSIZE={{ dehydrated_keysize }}
{% if dehydrated_deploycert is defined %}
HOOK=/etc/dehydrated/hookwrapper.sh
{% else %}
HOOK={{ dehydrated_install_root }}/pdns_api/pdns_api.sh
{% endif %}
HOOK_CHAIN="yes"
PDNS_HOST={{ pdns_host}}
PDNS_KEY={{ lookup('passwordstore', 'linse/pdns_apikey') }}