Add framework for managing letsencrypt certificates

[chef.git] / cookbooks / letsencrypt / templates / default / request.erb

diff --git a/cookbooks/letsencrypt/templates/default/request.erb b/cookbooks/letsencrypt/templates/default/request.erb
new file mode 100644 (file)
index 0000000..6d4c2b1
--- /dev/null
+++ b/cookbooks/letsencrypt/templates/default/request.erb
@@ -0,0 +1,20 @@
+#!/bin/sh
+
+# DO NOT EDIT - This file is being maintained by Chef
+
+/usr/bin/certbot certonly \
+    --non-interactive \
+    --config-dir /srv/acme.openstreetmap.org/config \
+    --work-dir /srv/acme.openstreetmap.org/work \
+    --logs-dir /srv/acme.openstreetmap.org/logs \
+    --email operations@osmfoundation.org \
+    --agree-tos \
+<% @domains.each do |domain| -%>
+    --domain <%= domain %> \
+<% end -%>
+    --webroot \
+    --webroot-path /srv/acme.openstreetmap.org/html
+
+/srv/acme.openstreetmap.org/bin/upload \
+    <%= @domains.first %> \
+    /srv/acme.openstreetmap.org/config/live/<%= @domains.first %>