Fix certificates for bastion.

2024-10-04 21:22:55 -04:00
parent bb66c9a907
commit 913d2e9f15
4 changed files with 30 additions and 16 deletions
--- a/ansible/roles/jail_bastion/files/nginx.conf
+++ b/ansible/roles/jail_bastion/files/nginx.conf
@@ -36,8 +36,8 @@ http {

        include conf.d/tls_settings.include;
        # RSA
-        ssl_certificate /stuff.fizz.buzz/fullchain1.pem;
-        ssl_certificate_key /stuff.fizz.buzz/privkey1.pem;
+        ssl_certificate /letsencrypt/live/stuff.fizz.buzz/fullchain.pem;
+        ssl_certificate_key /letsencrypt/live/stuff.fizz.buzz/privkey.pem;

        # Nginx by default only allows file uploads up to 1M in size
        client_max_body_size 50M;
--- a/ansible/roles/jail_bastion/tasks/freebsd.yaml
+++ b/ansible/roles/jail_bastion/tasks/freebsd.yaml
@@ -17,7 +17,7 @@
    owner: root
    group: wheel
  loop:
-    - /stuff.fizz.buzz
+    - /letsencrypt
    - /etc/rc.conf.d
    - /usr/local/etc/nginx/conf.d