Switch chef.osm.org to letsencrypt

[chef.git] / cookbooks / chef / recipes / server.rb

diff --git a/cookbooks/chef/recipes/server.rb b/cookbooks/chef/recipes/server.rb
index ac6f0d95e1050ce783c5d3bd91a72d175ead8e16..2ebf64f72dc6be392acab827923bf87edc9caa6b 100644 (file)
--- a/cookbooks/chef/recipes/server.rb
+++ b/cookbooks/chef/recipes/server.rb
@@ -78,6 +78,12 @@ end
 apache_module "alias"
 apache_module "proxy_http"
 
 apache_module "alias"
 apache_module "proxy_http"
 

+ssl_certificate "chef.openstreetmap.org" do
+  domains ["chef.openstreetmap.org", "chef.osm.org"]
+  fallback_certificate "openstreetmap"
+  notifies :reload, "service[apache2]"
+end
+

 apache_site "chef.openstreetmap.org" do
   template "apache.erb"
 end
 apache_site "chef.openstreetmap.org" do
   template "apache.erb"
 end