From 184f1a0143945549bf173a4bab22563a3af769c6 Mon Sep 17 00:00:00 2001
From: alex <alex@pdp7.net>
Date: Sun, 26 Oct 2025 10:00:41 +0100
Subject: Migrate from freeswitch to flexisip

---
 personal_infra/puppet/site/h1.pdp7.net.pp | 28 ++++++++++++++++++++++++++++
 1 file changed, 28 insertions(+)

(limited to 'personal_infra/puppet/site/h1.pdp7.net.pp')

diff --git a/personal_infra/puppet/site/h1.pdp7.net.pp b/personal_infra/puppet/site/h1.pdp7.net.pp
index 967a6348..f8b88ce3 100644
--- a/personal_infra/puppet/site/h1.pdp7.net.pp
+++ b/personal_infra/puppet/site/h1.pdp7.net.pp
@@ -179,4 +179,32 @@ node 'h1.pdp7.net' {
   }
   ~>
   Service['apache2']
+
+  # bogus host to obtain a certificate for sip.pdp7.net
+  file {"/etc/apache2/sites-enabled/sip.pdp7.net.conf":
+    content => @("EOT")
+      MDomain sip.pdp7.net
+
+      <VirtualHost *:443>
+        ServerName sip.pdp7.net
+        SSLEngine on
+        Alias / /bogus
+      </VirtualHost>
+      | EOT
+    ,
+  }
+  ~>
+  Service['apache2']
+
+  file {"/usr/local/bin/notify_md_renewal_hook_sip":
+    content => @("EOT"/$)
+    #!/bin/sh
+
+    cp /etc/apache2/md/domains/sip.pdp7.net/pubcert.pem  /rpool/data/subvol-209-disk-0/etc/pki/tls/certs/localhost.crt
+    cp /etc/apache2/md/domains/sip.pdp7.net/privkey.pem  /rpool/data/subvol-209-disk-0/etc/pki/tls/private/localhost.key
+    pct exec 209 systemctl restart flexisip-proxy
+    | EOT
+    ,
+    mode => '0755',
+  }
 }
-- 
cgit v1.2.3