matrix-docker-ansible-deploy/roles/matrix-server/templates/cron.d/matrix-ssl-certificate-renewal.j2

MAILTO="{{ matrix_ssl_support_email }}"

# The goal of this cronjob is to ask certbot to check
# the current SSL certificates and to see if some need renewal.
# If so, it would attempt to renew.
#
# Various services depend on these certificates and would need to be restarted.
# This is not our concern here. We simply make sure the certificates are up to date.
# Restarting of services happens on its own different schedule (other cronjobs).

{{ matrix_ssl_renew_cron_time_definition }} root /bin/bash /usr/local/bin/matrix-ssl-certificates-renew
Move SSL certificates from /etc/pki/acmetool-certs to /matrix/ssl Moving keeps everything in the /matrix directory, so that we wouldn't contaminate anything else on the system or risk clashing with something else. Also retrieving certificates separately for the Riot and Matrix domains, which should help in multiple ways: - allows them to be very different (completely separate base domain..) - allows for Riot to be disabled for the playbook some time later and still have the code not break 2017-09-11 22:50:14 +02:00			`MAILTO="{{ matrix_ssl_support_email }}"`
Initial commit 2017-07-31 22:07:30 +02:00
Switch from acmetool to certbot for SSL certificate retrieval 2018-08-29 08:37:44 +02:00			`# The goal of this cronjob is to ask certbot to check`
Initial commit 2017-07-31 22:07:30 +02:00			`# the current SSL certificates and to see if some need renewal.`
Add http->http redirection for Matrix/Riot Doing this means that matrix-nginx-proxy now starts occupying port 80, which necessitates that SSL renewal happens slightly differently. 2017-08-06 18:10:50 +02:00			`# If so, it would attempt to renew.`
Initial commit 2017-07-31 22:07:30 +02:00			`#`
			`# Various services depend on these certificates and would need to be restarted.`
			`# This is not our concern here. We simply make sure the certificates are up to date.`
			`# Restarting of services happens on its own different schedule (other cronjobs).`

Switch from acmetool to certbot for SSL certificate retrieval 2018-08-29 08:37:44 +02:00			`{{ matrix_ssl_renew_cron_time_definition }} root /bin/bash /usr/local/bin/matrix-ssl-certificates-renew`