Some clarification about ssl.yml task #70

Merged

muppeth merged 3 commits from 972-ssl_src_path_clarification into staging

2024-08-02 10:16:16 +02:00

muppeth commented

2024-08-01 22:11:16 +02:00

Owner

Added clarification to task naming in ssl.yml task
added a note about certificates in readme file
Removed changelog (we should do releases insted and keep it up to date)

This is related to #972

- Added clarification to task naming in ssl.yml task - added a note about certificates in readme file - Removed changelog (we should do releases insted and keep it up to date) This is related to [#972](https://git.disroot.org/Disroot/Disroot-Project/issues/972)

muppeth added 15 commits 2024-08-01 22:11:16 +02:00

Vhosts creation change (#63 ) 002e1183fc

Changed the way vhosts are created. This is to prevent situation where https vhosts are created without corresponding certificate which is  causing error. Solution to that is to check if ssl cert exists for vhost before creating them.

Suggested approach is to create vhost called '01.letsencrypt' or `01.domain.ltd` using `letsencrypt` template. This will allow new certificates to be created for upcoming vhosts and once certs are  created, nginx will be able to create vhosts and not error out.  (so first run letsencrypt and then nginx).

Currently vhost creation and enabling is done separate for HTTP and HTTPS vhosts. Not the best solution, but works for now.

Reviewed-on: #63
Reviewed-by: meaz <meaz@no-reply@disroot.org>
Co-authored-by: muppeth <muppeth@disroot.org>
Co-committed-by: muppeth <muppeth@disroot.org>

bump to cryptpad 5.7.0 (#62 ) 5646a553fc

Reviewed-on: #62
Reviewed-by: muppeth <muppeth@no-reply@disroot.org>
Co-authored-by: meaz <meaz@disroot.org>
Co-committed-by: meaz <meaz@disroot.org>

fixed vhost task; again 2aa683346c

Merge branch 'main' into staging b8b8fb4d4e

Pleroma Update (#66 ) d3c725e385

Reviewed-on: #66

quikc fix for pleroma/akkoma d3dbe53897

Fix Cert Exists (#67 ) 8e2cbfee74

changed the cgheck for certificate existance to item.ssl_name instead of item.name. This is cover situation where name of the certificate is different then then name of the vhost (eg. wildcard cert). Additionally added `item.name` to name of the tasks for things like vhost create to make sure we see which vhost is created (better visability)

Reviewed-on: #67
Reviewed-by: meaz <meaz@no-reply@disroot.org>
Co-authored-by: muppeth <muppeth@disroot.org>
Co-committed-by: muppeth <muppeth@disroot.org>

fixup headers section of the templates 242f5105c4

fixed wrong condition chain in Diable vhost task 022fc0bb66

sqeezing a fix for akkoma mediasite split 6a64117c52

merging conflict 28cb0b3c31

add peertube template (#59 ) 4bb260bc4a

Some " Bypass PeerTube for performance reasons. Optional" are commented out, otherwise I get issue. If you manage to have those working that is nice @muppeth otherwise that's optional anyway.

Co-authored-by: muppeth <muppeth@disroot.org>
Co-authored-by: muppeth <muppeth@no-reply@disroot.org>
Reviewed-on: #59
Reviewed-by: muppeth <muppeth@no-reply@disroot.org>

Merge branch 'main' into staging 5163b5ba63

Merge branch 'main' into staging e5024989a8

added clarification to task naming in ssl.yml task; added a note about certificates in readme file;removed outdated changelog 65ed2e1bb2

muppeth changed target branch from main to staging

2024-08-01 22:11:32 +02:00

muppeth referenced this pull request from Disroot/Disroot-Project

2024-08-01 22:14:05 +02:00

[Nginx] - Shouldn't ssl_src_path be remplaced by nginx_ssl_dir in ssl.yml task #972