mirror of
https://github.com/krislamo/puppet-acme_vault
synced 2024-11-09 20:30:36 +00:00
98 lines
2.9 KiB
Puppet
98 lines
2.9 KiB
Puppet
# Configuration for requesting a cert from letsencrypt, and storing it in vault.
|
|
#
|
|
|
|
class acme_vault::request (
|
|
$user = $::acme_vault::common::user,
|
|
$group = $::acme_vault::common::group,
|
|
$home_dir = $::acme_vault::common::home_dir,
|
|
$contact_email = $::acme_vault::common::contact_email,
|
|
$domains = $::acme_vault::common::domains,
|
|
$overrides = $::acme_vault::common::overrides,
|
|
|
|
$staging = $::acme_vault::params::staging,
|
|
$staging_url = $::acme_vault::params::staging_url,
|
|
$prod_url = $::acme_vault::params::prod_url,
|
|
|
|
$acme_revision = $::acme_vault::params::acme_revision,
|
|
$acme_repo_path = $::acme_vault::params::acme_repo_path,
|
|
$acme_script = $::acme_vault::params::acme_script,
|
|
|
|
$namecheap_username = $::acme_vault::params::namecheap_username,
|
|
$namecheap_api_key = $::acme_vault::params::namecheap_api_key,
|
|
$namecheap_sourceip = $::acme_vault::params::namecheap_sourceip,
|
|
|
|
) inherits acme_vault::params {
|
|
|
|
include acme_vault::common
|
|
|
|
$request_bashrc_template = @(END)
|
|
export TLDEXTRACT_CACHE=$HOME/.tld_set
|
|
export NAMECHEAP_USERNAME=<%= @namecheap_username %>
|
|
export NAMECHEAP_API_KEY=<%= @namecheap_api_key %>
|
|
export NAMECHEAP_SOURCEIP=<%= @namecheap_sourceip %>
|
|
END
|
|
|
|
# variables in bashrc
|
|
concat::fragment { 'request_bashrc':
|
|
target => "${home_dir}/.bashrc",
|
|
content => inline_template($request_bashrc_template),
|
|
order => '02',
|
|
}
|
|
|
|
|
|
# checkout acme repo
|
|
vcsrepo { $acme_repo_path:
|
|
ensure => present,
|
|
provider => git,
|
|
source => 'https://github.com/Neilpang/acme.sh.git',
|
|
revision => $acme_revision,
|
|
}
|
|
|
|
file { "${home_dir}/.acme.sh":
|
|
ensure => directory,
|
|
owner => $user,
|
|
group => $group,
|
|
mode => '0700',
|
|
} ->
|
|
file { "${home_dir}/.acme.sh/account.conf":
|
|
ensure => present,
|
|
owner => $user,
|
|
group => $group,
|
|
mode => '0600',
|
|
} ->
|
|
file_line { ' add email to acme conf':
|
|
path => "${home_dir}/.acme.sh/account.conf",
|
|
line => "ACCOUNT_EMAIL='${contact_email}'",
|
|
match => '^ACCOUNT_EMAIL=.*$',
|
|
}
|
|
|
|
# create issue scripts
|
|
$domains.each |$domain, $d_list| {
|
|
file {"/${home_dir}/${domain}.sh":
|
|
ensure => present,
|
|
mode => '0700',
|
|
owner => $user,
|
|
group => $group,
|
|
|
|
content => epp('acme_vault/domain.epp', {
|
|
acme_script => $acme_script,
|
|
domain => $domain,
|
|
domains => $d_list,
|
|
staging => $staging,
|
|
staging_url => $staging_url,
|
|
prod_url => $prod_url,
|
|
overrides => $overrides,
|
|
}
|
|
)
|
|
}
|
|
cron { "${domain}_issue":
|
|
command => "${home_dir}/${domain}.sh",
|
|
user => $user,
|
|
weekday => 1,
|
|
hour => 11,
|
|
minute => 28,
|
|
}
|
|
}
|
|
|
|
}
|