Allow setting up a vhost for certgetter

Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2026-03-31 09:20:43 +08:00 · 2017-09-09 22:25:08 +00:00
parent bdb5d657c6
commit 863dffdb66
2 changed files with 5 additions and 0 deletions
--- a/roles/httpd/website/defaults/main.yml
+++ b/roles/httpd/website/defaults/main.yml
@@ -4,6 +4,7 @@

 server_aliases: []
 server_admin: webmaster@fedoraproject.org
+certbot: false
 ssl: true
 sslonly: false
 SSLCertificateChainFile: wildcard-2017.fedoraproject.org.intermediate.cert
--- a/roles/httpd/website/templates/website.conf
+++ b/roles/httpd/website/templates/website.conf
@@ -10,6 +10,10 @@
  SetOutputFilter DEFLATE
 {% endif %}

+{% if certbot %}
+  ProxyPass "/.well-known/acme-challenge" "http://certgetter01/.well-known/acme-challenge"
+{% endif %}
+
 {% if sslonly %}
  RewriteEngine On
  RewriteCond %{HTTPS} off