Commit Graph

6 Commits

Author SHA1 Message Date
Jonathan Rosser ba3a89944b Allow multiple methods of installing certbot
Currently the only method is by downloading the certbot-auto script
and executing that. Some distros supply a so this patch sets up
an option for a future patch to add distro package support

Change-Id: Ie32e6f577c9aa898906ee76199fd0ebe75d5ae95
2020-05-05 14:01:23 +00:00
Mohammed Naser 8f9a452bb5 handlers: reload instead of restart
When we restart HAproxy, we kill all the connections and it causes
all of the services to be dropped out. This is really not ideal and
causes things to be lost in the control plane.

This patch instead does a reload which will safely keep the existing
clients connected till they evacuate and then use SO_REUSEPORT for
the new process.

Change-Id: I502457f691ad66dfd68ace21ac1575cea23b538a
2019-04-07 01:56:33 -04:00
Zuul bde8657721 Merge "Remove suffix from letsencrypt renew" 2019-03-12 17:41:18 +00:00
Ionuț Bîru c86ec47b4b Remove suffix from letsencrypt renew
The suffix is added automatically by certbot if there is already a configuration for
domain passed as argument.

Change-Id: I7440b84648bf58c36dcb262920c876c7d1a5efa4
2019-03-04 09:36:03 +02:00
Frank Kloeker b9cb133bb0 Fix venv installation of Letsencrypt certbot
certbot-auto wants to install depedencies which are possibly
not fulfilled by the repo-server - so bypass installation here.
Use the venv bin later for the renew script.
Minor errors are also fixed.

Change-Id: I4087bbcb4fe6182cb090a5b6b85bea36768b4f4f
2019-02-02 01:14:18 +01:00
Frank Kloeker 4fb2059a3b Add feature Letsencrypt SSL certification
- installs certbot-auto
- generates and validates ssl cert
- installs cert in haproxy settings
- renew cert with cron

Change-Id: Iea59ec2893a988b184ca8bc70e1d273ac071551e
2019-01-17 17:54:50 +01:00