Change webmail cert path to client path and add symlink on server.

So webmail can be moved between servers if necessary.
This commit is contained in:
Jim Hague 2023-03-09 16:58:46 +00:00
parent 8efa0b29d6
commit f7639c230a
2 changed files with 7 additions and 2 deletions

View File

@ -51,3 +51,8 @@ server_key:
ssh_auth.present: ssh_auth.present:
- user: root - user: root
- source: salt://certificates/certificates_id_ed25519.pub - source: salt://certificates/certificates_id_ed25519.pub
server_client_certificate_location:
file.symlink:
- name: /var/local/certificates
- target: /var/lib/dehydrated/certs

View File

@ -54,8 +54,8 @@
</Directory> </Directory>
SSLEngine on SSLEngine on
SSLCertificateFile /var/lib/dehydrated/certs/mail.lunch.org.uk/fullchain.pem SSLCertificateFile /var/local/certificates/mail.lunch.org.uk/fullchain.pem
SSLCertificateKeyFile /var/lib/dehydrated/certs/mail.lunch.org.uk/privkey.pem SSLCertificateKeyFile /var/local/certificates/mail.lunch.org.uk/privkey.pem
</VirtualHost> </VirtualHost>
</IfModule> </IfModule>