confdroid/confdroid_nagios
3
0
Fork 0
Code Issues Projects Wiki Activity

reversing steps to create cert

Browse Source
This commit is contained in:
Arne Teuke
2017-07-22 12:59:25 +01:00
parent a38ace2f06
commit 5a673baf41
2 changed files with 6 additions and 40 deletions
Download Patch File Download Diff File Expand all files Collapse all files

34
manifests/certbot/certs.pp
View File

@@ -31,33 +31,6 @@ class cd_nagios::certbot::certs (
require cd_certbot require cd_certbot
require cd_apache require cd_apache
# ensure there is no forward vhost file
exec { 'remove_forward_vhost':
command => "rm -Rf ${ng_forward_conf}",
creates => '/etc/httpd/conf.d/.cert_created',
}
exec { 'remove_nagios_conf':
command => "rm -Rf ${ng_nagios_conf}",
creates => '/etc/httpd/conf.d/.cert_created',
require => Exec['remove_forward_vhost'],
}
exec { 'remove_index_html':
command => "rm -Rf ${ng_index_html_file}",
creates => '/etc/httpd/conf.d/.cert_created',
require => Exec['remove_nagios_conf'],
notify => Service[$ae_service],
}
exec { 'disable_selinux_temporarily':
command => 'setenforce 0',
path => ['/usr/sbin'],
creates => '/etc/httpd/conf.d/.cert_created',
require => Exec['remove_index_html'],
}
# create cert # create cert
exec { 'create_cert': exec { 'create_cert':
@@ -70,13 +43,6 @@ class cd_nagios::certbot::certs (
creates => '/etc/httpd/conf.d/.cert_created', creates => '/etc/httpd/conf.d/.cert_created',
} }
exec { 'enable_selinux':
command => 'setenforce 1',
path => ['/usr/sbin'],
creates => '/etc/httpd/conf.d/.cert_created',
require => Exec['create_cert'],
}
# renew certs # renew certs
exec { 'renew_cert': exec { 'renew_cert':

12
manifests/main/config.pp
View File

@@ -30,13 +30,13 @@ class cd_nagios::main::config (
if $::fqdn == $ng_nagios_server { if $::fqdn == $ng_nagios_server {
# include cd_nagios::server::service # include cd_nagios::server::service
# if $ng_include_fw == true { if $ng_include_fw == true {
# include cd_nagios::firewall::iptables include cd_nagios::firewall::iptables
# } }
# if $ng_use_selinux_tools == true { if $ng_use_selinux_tools == true {
# include cd_nagios::selinux::config include cd_nagios::selinux::config
# } }
if $ng_enable_certbot == true { if $ng_enable_certbot == true {
require cd_nagios::certbot::certs require cd_nagios::certbot::certs