mirror of
https://git.lapiole.org/dani/ansible-roles.git
synced 2025-04-27 23:53:18 +02:00
15 lines
803 B
Plaintext
15 lines
803 B
Plaintext
|
#!/bin/sh
|
||
|
|
|
||
|
|
{% if journal_remote_letsencrypt_cert is defined %}
|
||
|
|
mkdir -p /etc/systemd/journal-remote-tls
|
||
|
|
chown systemd-journal-remote:systemd-journal-remote /etc/systemd/journal-remote-tls
|
||
|
|
chmod 700 /etc/systemd/journal-remote-tls
|
||
|
|
if [ -e /var/lib/dehydrated/certificates/certs/{{ journal_remote_letsencrypt_cert }}/privkey.pem ]; then
|
||
|
|
cp -f /var/lib/dehydrated/certificates/certs/{{ journal_remote_letsencrypt_cert }}/privkey.pem /etc/systemd/journal-remote-tls/
|
||
|
|
cp -f /var/lib/dehydrated/certificates/certs/{{ journal_remote_letsencrypt_cert }}/fullchain.pem /etc/systemd/journal-remote-tls/
|
||
|
|
chown systemd-journal-remote:systemd-journal-remote /etc/systemd/journal-remote-tls/*
|
||
|
|
chmod 600 /etc/systemd/journal-remote-tls/privkey.pem
|
||
|
|
/sbin/service systemd-journal-remote restart
|
||
|
|
fi
|
||
|
|
{% endif %}
|