diff options
| author | alex <alex@pdp7.net> | 2025-10-26 10:00:41 +0100 |
|---|---|---|
| committer | alexpdp7 <alex@corcoles.net> | 2025-10-26 12:14:27 +0100 |
| commit | 184f1a0143945549bf173a4bab22563a3af769c6 (patch) | |
| tree | 9b3027c49a14473f34efd83031562e647c14dc39 /personal_infra/puppet/site/h1.pdp7.net.pp | |
| parent | 51d9cd16d8f625603e0eecad315431f62fb8841f (diff) | |
Migrate from freeswitch to flexisip
Diffstat (limited to 'personal_infra/puppet/site/h1.pdp7.net.pp')
| -rw-r--r-- | personal_infra/puppet/site/h1.pdp7.net.pp | 28 |
1 files changed, 28 insertions, 0 deletions
diff --git a/personal_infra/puppet/site/h1.pdp7.net.pp b/personal_infra/puppet/site/h1.pdp7.net.pp index 967a6348..f8b88ce3 100644 --- a/personal_infra/puppet/site/h1.pdp7.net.pp +++ b/personal_infra/puppet/site/h1.pdp7.net.pp @@ -179,4 +179,32 @@ node 'h1.pdp7.net' { } ~> Service['apache2'] + + # bogus host to obtain a certificate for sip.pdp7.net + file {"/etc/apache2/sites-enabled/sip.pdp7.net.conf": + content => @("EOT") + MDomain sip.pdp7.net + + <VirtualHost *:443> + ServerName sip.pdp7.net + SSLEngine on + Alias / /bogus + </VirtualHost> + | EOT + , + } + ~> + Service['apache2'] + + file {"/usr/local/bin/notify_md_renewal_hook_sip": + content => @("EOT"/$) + #!/bin/sh + + cp /etc/apache2/md/domains/sip.pdp7.net/pubcert.pem /rpool/data/subvol-209-disk-0/etc/pki/tls/certs/localhost.crt + cp /etc/apache2/md/domains/sip.pdp7.net/privkey.pem /rpool/data/subvol-209-disk-0/etc/pki/tls/private/localhost.key + pct exec 209 systemctl restart flexisip-proxy + | EOT + , + mode => '0755', + } } |
