From 89d08cb902eaba0eca6bd99d01971ae91ace7f84 Mon Sep 17 00:00:00 2001
From: Lars Wirzenius <liw@liw.fi>
Date: Fri, 12 Mar 2021 10:33:36 +0200
Subject: fix: install cron job to renew Let's Encrypt certificate weekly

---
 ansible/obnam-server.yml | 11 +++++++++--
 1 file changed, 9 insertions(+), 2 deletions(-)

diff --git a/ansible/obnam-server.yml b/ansible/obnam-server.yml
index 8837f1b..43d5dc8 100644
--- a/ansible/obnam-server.yml
+++ b/ansible/obnam-server.yml
@@ -30,6 +30,15 @@
           - dehydrated-apache2
       when: domain is defined
 
+    - name: "install cron job to update TLS certificates"
+      cron:
+        name: "dehydrated"
+        cron_file: "dehydrated"
+        user: root
+        minute: "0"
+        hour: "0"
+        job: "systemctl stop obnam; systemctl start apache2; dehydrated -c; systemctl stop apache2; systemctl start obnam"
+
     - name: create Obnam configuration directory
       file:
         path: /etc/obnam
@@ -101,7 +110,6 @@
     tls_key_path: "/var/lib/dehydrated/certs/{{ domain }}/privkey.pem"
     tls_cert_path: "/var/lib/dehydrated/certs/{{ domain }}/cert.pem"
 
-
     apt_signing_key: |
       -----BEGIN PGP PUBLIC KEY BLOCK-----
 
@@ -132,4 +140,3 @@
       GSJSdir7NkZidgwoCPA7BTqsb5LN
       =dXB0
       -----END PGP PUBLIC KEY BLOCK-----
-
-- 
cgit v1.2.1