openstack-ansible-haproxy_s.../templates/letsencrypt_renew_certbot_d...

10 lines
389 B
Django/Jinja

#!/bin/bash
# renew cert if required and copy to haproxy destination
{% for vip in [ haproxy_bind_external_lb_vip_address ] + extra_lb_tls_vip_addresses %}
cat /etc/letsencrypt/live/{{ haproxy_bind_external_lb_vip_address }}/{fullchain,privkey}.pem \
> {{ haproxy_ssl_cert_path ~ '/haproxy_' ~ ansible_facts['hostname'] ~ '-' ~ vip ~ '.pem' }}
{% endfor %}
systemctl reload haproxy