Use Leti's Encrypt certificates for binary-kitchen.de.

This commit is contained in:
Markus 2017-02-28 14:14:33 +01:00
parent 7c01620a0f
commit e7e49f356f
4 changed files with 19 additions and 1 deletions

View File

@ -1,6 +1,6 @@
--- ---
www.binary-kitchen.de: www.binary-kitchen.de binary-kitchen.de:
- path: /etc/nginx/ssl/www.binary-kitchen.de.crt - path: /etc/nginx/ssl/www.binary-kitchen.de.crt
user: root user: root
group: root group: root

View File

@ -14,6 +14,20 @@ server {
} }
} }
server {
listen 443 ssl http2;
listen [::]:443 ssl http2;
server_name binary-kitchen.de;
ssl_certificate_key /etc/nginx/ssl/www.binary-kitchen.de.key;
ssl_certificate /etc/nginx/ssl/www.binary-kitchen.de.crt;
location / {
return 301 https://www.binary-kitchen.de$request_uri;
}
}
server { server {
listen 443 ssl http2; listen 443 ssl http2;
listen [::]:443 ssl http2; listen [::]:443 ssl http2;

View File

@ -5,3 +5,6 @@
- name: Restart php5-fpm - name: Restart php5-fpm
service: name=php5-fpm state=restarted service: name=php5-fpm state=restarted
- name: Run certmgr
command: /opt/acertmgr/acertmgr.py

View File

@ -20,6 +20,7 @@
- name: Configure certificate manager - name: Configure certificate manager
copy: src=certs dest=/etc/acme/domains.d/www.binary-kitchen.de.conf copy: src=certs dest=/etc/acme/domains.d/www.binary-kitchen.de.conf
notify: Run certmgr
- name: Configure vhosts - name: Configure vhosts
copy: src=vhost dest=/etc/nginx/sites-available/www copy: src=vhost dest=/etc/nginx/sites-available/www