# limitations under the License.
#
-include_recipe "apache::ssl"
+include_recipe "apache"
keys = data_bag_item("chef", "keys")
-package "certbot"
-package "ruby"
+package %w[
+ certbot
+ ruby
+]
directory "/etc/letsencrypt" do
owner "letsencrypt"
end
end
+template "/srv/acme.openstreetmap.org/bin/check-certificates" do
+ source "check-certificates.erb"
+ owner "root"
+ group "root"
+ mode 0o755
+ variables :certificates => certificates
+end
+
template "/etc/cron.d/letsencrypt" do
source "cron.erb"
owner "root"