From dc867699f39d701fe73bcdeda78b65d87690d859 Mon Sep 17 00:00:00 2001
From: Mathias Magnusson <mathias@magnusson.space>
Date: Sat, 2 Mar 2024 15:31:35 +0100
Subject: I don't even know at this point. Fuck lego. I think, i don't even
 know

---
 jobs/certificates.nomad.hcl | 27 +++++++++++++--------------
 1 file changed, 13 insertions(+), 14 deletions(-)

(limited to 'jobs/certificates.nomad.hcl')

diff --git a/jobs/certificates.nomad.hcl b/jobs/certificates.nomad.hcl
index e1cbc51..db7993d 100644
--- a/jobs/certificates.nomad.hcl
+++ b/jobs/certificates.nomad.hcl
@@ -2,7 +2,7 @@ job "certificates" {
   type = "batch"
 
   periodic {
-    cron = "@monthly"
+    crons = ["@monthly"]
   }
 
   group "lego" {
@@ -17,7 +17,9 @@ job "certificates" {
     }
 
     network {
-      port "http" { }
+      port "http" {
+        # static = 80
+      }
     }
 
     service {
@@ -46,26 +48,23 @@ job "certificates" {
         data = <<EOF
 #!/usr/bin/env bash
 
-function dns() {
-    [ -f "/lego/certificates/$1.key" ] && cmd="renew --no-random-sleep --days 45" || cmd=run
+function cert() {
+    # --server "https://acme-staging-v02.api.letsencrypt.org/directory"
     /local/lego \
         --accept-tos \
         --path /lego \
         --email mathias+certs@magnusson.space \
-        --dns cloudflare \
-        $${@/#/-d=} \
-        $cmd
+        "$@"
+}
+
+function dns() {
+    [ -f "/lego/certificates/$1.key" ] && cmd="renew --no-random-sleep --days 45" || cmd=run
+    cert --dns cloudflare $${@/#/-d=} $cmd
 }
 
 function http() {
     [ -f "/lego/certificates/$1.key" ] && cmd="renew --no-random-sleep --days 45" || cmd=run
-    /local/lego \
-        --accept-tos \
-        --path /lego \
-        --email mathias+certs@magnusson.space \
-        --http --http.port ":$NOMAD_PORT_http" \
-        $${@/#/-d=} \
-        $cmd
+    cert --http --http.port ":$NOMAD_PORT_http" $${@/#/-d=} $cmd
 }
 
 dns magnusson.space *.magnusson.space
-- 
cgit v1.2.3