7611fb9d76
* add dehydrated role with pdns-api.sh support * Minor changes to Readme * Remove Meta * move dehydrated to linse * Remove Zuckerwatte from PR (nothing to do with dehydrated) * Add other domains to dehydrated config, added hook_chain * Add authorized keys for cert user, add structures in /home/cert/ for checking out certs * Send dehydrated ouput to /dev/null * user authorized_keys module, add kumpir key * Fix typo. Use \\n for each ssh-key * remove unnecessary .ssh creation (done by authorized_key module) * Added wrapper script to execute two hooks: pdns_api.sh + deploy certificates * Remove challengetype variable, as only dns-01 is supported anyway. * Add freifunk-mainz.de domain * fix cert deploy script.
14 lines
481 B
Django/Jinja
14 lines
481 B
Django/Jinja
#jinja2: trim_blocks: True, lstrip_blocks: True
|
|
CA="{{ dehydrated_ca }}"
|
|
CHALLENGETYPE="dns-01"
|
|
CONTACT_EMAIL="{{ dehydrated_contactemail | mandatory }}"
|
|
KEY_ALGO={{ dehydrated_key_algo }}
|
|
KEYSIZE={{ dehydrated_keysize }}
|
|
{% if dehydrated_deploycert is defined %}
|
|
HOOK=/etc/dehydrated/hookwrapper.sh
|
|
{% else %}
|
|
HOOK={{ dehydrated_install_root }}/pdns_api/pdns_api.sh
|
|
{% endif %}
|
|
HOOK_CHAIN="yes"
|
|
PDNS_HOST={{ pdns_host}}
|
|
PDNS_KEY={{ lookup('passwordstore', 'linse/pdns_apikey') }}
|