blob: f5452a3389c9e5402035ff8764bbfa17a6984958 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
|
job "certificates" {
type = "batch"
periodic {
cron = "@monthly"
}
group "lego" {
restart {
attempts = 1
delay = "1h"
}
volume "certs" {
type = "host"
source = "ca-certificates"
}
task "lego" {
driver = "exec"
volume_mount {
volume = "certs"
destination = "/lego"
}
config {
command = "certs.sh"
}
template {
data = <<EOF
#!/usr/bin/env bash
function dns() {
[ -f "/lego/certificates/$1.key" ] && cmd="renew --days 45" || cmd=run
/local/lego \
--accept-tos \
--path /lego \
--email mathias+certs@magnusson.space \
--dns cloudflare \
$${@/#/-d=} \
$cmd
}
dns magnusson.space *.magnusson.space
dns magnusson.wiki *.magnusson.wiki
dns xn--srskildakommandorrelsegruppen-0pc88c.se *.xn--srskildakommandorrelsegruppen-0pc88c.se
EOF
destination = "local/certs.sh"
}
template {
data = <<EOF
{{ with nomadVar "nomad/jobs/certificates" }}
CLOUDFLARE_DNS_API_TOKEN={{ .cloudflare_dns_api_token }}
{{ end }}
EOF
destination = "local/.env"
env = true
}
artifact {
source = "https://github.com/go-acme/lego/releases/download/v4.13.3/lego_v4.13.3_linux_amd64.tar.gz"
}
}
}
}
|
