aboutsummaryrefslogtreecommitdiff
path: root/personal_infra/puppet/site/h1.pdp7.net.pp
diff options
context:
space:
mode:
authoralex <alex@pdp7.net>2025-10-26 10:00:41 +0100
committeralexpdp7 <alex@corcoles.net>2025-10-26 12:14:27 +0100
commit184f1a0143945549bf173a4bab22563a3af769c6 (patch)
tree9b3027c49a14473f34efd83031562e647c14dc39 /personal_infra/puppet/site/h1.pdp7.net.pp
parent51d9cd16d8f625603e0eecad315431f62fb8841f (diff)
Migrate from freeswitch to flexisip
Diffstat (limited to 'personal_infra/puppet/site/h1.pdp7.net.pp')
-rw-r--r--personal_infra/puppet/site/h1.pdp7.net.pp28
1 files changed, 28 insertions, 0 deletions
diff --git a/personal_infra/puppet/site/h1.pdp7.net.pp b/personal_infra/puppet/site/h1.pdp7.net.pp
index 967a6348..f8b88ce3 100644
--- a/personal_infra/puppet/site/h1.pdp7.net.pp
+++ b/personal_infra/puppet/site/h1.pdp7.net.pp
@@ -179,4 +179,32 @@ node 'h1.pdp7.net' {
}
~>
Service['apache2']
+
+ # bogus host to obtain a certificate for sip.pdp7.net
+ file {"/etc/apache2/sites-enabled/sip.pdp7.net.conf":
+ content => @("EOT")
+ MDomain sip.pdp7.net
+
+ <VirtualHost *:443>
+ ServerName sip.pdp7.net
+ SSLEngine on
+ Alias / /bogus
+ </VirtualHost>
+ | EOT
+ ,
+ }
+ ~>
+ Service['apache2']
+
+ file {"/usr/local/bin/notify_md_renewal_hook_sip":
+ content => @("EOT"/$)
+ #!/bin/sh
+
+ cp /etc/apache2/md/domains/sip.pdp7.net/pubcert.pem /rpool/data/subvol-209-disk-0/etc/pki/tls/certs/localhost.crt
+ cp /etc/apache2/md/domains/sip.pdp7.net/privkey.pem /rpool/data/subvol-209-disk-0/etc/pki/tls/private/localhost.key
+ pct exec 209 systemctl restart flexisip-proxy
+ | EOT
+ ,
+ mode => '0755',
+ }
}