ansible-roles/roles/pve/templates/dehydrated_hook.sh.j2
2021-12-01 19:13:34 +01:00

12 lines
476 B
Django/Jinja

#!/bin/bash
{% if pve_letsencrypt %}
if [ $1 == "{{ inventory_hostname }}" ]; then
cat /var/lib/dehydrated/certificates/certs/{{ inventory_hostname }}/privkey.pem > /etc/pve/local/pveproxy-ssl.key
cat /var/lib/dehydrated/certificates/certs/{{ inventory_hostname }}/fullchain.pem > /etc/pve/local/pveproxy-ssl.pem
chown root:www-data /etc/pve/local/pveproxy-ssl.{key,pem}
chmod 640 /etc/pve/local/pveproxy-ssl.{key,pem}
/bin/systemctl reload pveproxy
fi
{% endif %}