Compare commits
8 Commits
| Author | SHA1 | Date | |
|---|---|---|---|
| 200dbf50fc | |||
| c17d1c49f1 | |||
| abb193a03c | |||
| d26a6e5ec8 | |||
| 3d50d99368 | |||
| 3a9d39de4c | |||
| d7d87e0162 | |||
| 48792673dc |
2
Makefile
2
Makefile
@@ -2,7 +2,7 @@ NAME = netoik-rp
|
||||
VERSION = $(shell git describe --abbrev=0)
|
||||
RELEASE = $(shell git rev-parse --short HEAD)
|
||||
ARCH = noarch
|
||||
OWNER = samuel
|
||||
OWNER = netoik
|
||||
SUMMARY = "Netoïk Reverse Proxy"
|
||||
LICENSE = "MIT"
|
||||
URL = "https://git.netoik.io/$(OWNER)/$(NAME)"
|
||||
|
||||
@@ -72,7 +72,7 @@ Some commands to deploy the RPM package on server
|
||||
|
||||
- Show available versions:
|
||||
```shell
|
||||
dnf --showduplicates netoik-rp
|
||||
dnf search --showduplicates netoik-rp
|
||||
```
|
||||
|
||||
- Create certbot ovh credentials here:
|
||||
@@ -98,6 +98,11 @@ Some commands to deploy the RPM package on server
|
||||
set +a
|
||||
```
|
||||
|
||||
- Install or upgrade without certbot (for testing environment)
|
||||
```shell
|
||||
SKIP_CERTBOT=true dnf --nogpgcheck --refresh --assumeyes --best install netoik-rp
|
||||
```
|
||||
|
||||
|
||||
# Security Notes
|
||||
|
||||
|
||||
@@ -2,4 +2,4 @@
|
||||
Description=Renew certbot certificates
|
||||
|
||||
[Service]
|
||||
ExecStart=certbot_renew
|
||||
ExecStart=/usr/sbin/certbot_renew
|
||||
|
||||
@@ -22,14 +22,19 @@ Install the reverse proxy called nginx with a predefined configuration and with
|
||||
%make_install
|
||||
|
||||
%post
|
||||
if [ -z $SKIP_CERTBOT ]; then
|
||||
# Check required OVH variables
|
||||
if [ -z $OVH_ENDPOINT ]; then echo "Missing env var OVH_ENDPOINT!" 1>&2; exit 1; fi
|
||||
if [ -z $OVH_APPLICATION_NAME ]; then echo "Missing env var OVH_APPLICATION_KEY!" 1>&2; exit 1; fi
|
||||
if [ -z $OVH_APPLICATION_DESCRIPTION ]; then echo "Missing env var OVH_APPLICATION_DESCRIPTION!" 1>&2; exit 1; fi
|
||||
if [ -z $OVH_APPLICATION_KEY ]; then echo "Missing env var OVH_APPLICATION_KEY!" 1>&2; exit 1; fi
|
||||
if [ -z $OVH_APPLICATION_SECRET ]; then echo "Missing env var OVH_APPLICATION_SECRET!" 1>&2; exit 1; fi
|
||||
if [ -z $OVH_CONSUMER_KEY ]; then echo "Missing env var OVH_CONSUMER_KEY!" 1>&2; exit 1; fi
|
||||
|
||||
# Replace secrets in ovh.ini
|
||||
envsubst < %{_sysconfdir}/certbot/ovh.ini > %{_sysconfdir}/certbot/.ovh.ini.new
|
||||
if cmp --silent %{_sysconfdir}/certbot/.ovh.ini.new %{_sysconfdir}/certbot/ovh.ini; then
|
||||
rm %{_sysconfdir}/certbot/.ovh.ini.new
|
||||
else
|
||||
mv %{_sysconfdir}/certbot/.ovh.ini.new %{_sysconfdir}/certbot/ovh.ini
|
||||
chmod 600 %{_sysconfdir}/certbot/ovh.ini
|
||||
fi
|
||||
|
||||
# Create virtualenv with certot
|
||||
if [ ! -d "/opt/certbot" ]; then
|
||||
@@ -42,6 +47,11 @@ fi
|
||||
if ! certbot certificates --cert-name netoik.io | grep --quiet netoik.io; then
|
||||
certbot certonly --cert-name netoik.io --non-interactive --agree-tos --email samuel.campos@netoik.io --dns-ovh --dns-ovh-credentials %{_sysconfdir}/certbot/ovh.ini -d *.netoik.io -d *.samuel-campos.fr
|
||||
fi
|
||||
else
|
||||
# Skipping certbot, so create self-signed certificate
|
||||
mkdir --parents /etc/letsencrypt/live/netoik.io
|
||||
openssl req -newkey rsa:4096 -nodes -keyout /etc/letsencrypt/live/netoik.io/privkey.pem -x509 -days 365 -out /etc/letsencrypt/live/netoik.io/fullchain.pem -subj "/C=US/ST=State/L=City/O=Organization/OU=Department/CN=netoik.io"
|
||||
fi
|
||||
|
||||
# Create ssl dh params if not already exists
|
||||
if [ ! -f "%{_sysconfdir}/letsencrypt/ssl-dhparams.pem" ]; then
|
||||
|
||||
Reference in New Issue
Block a user