24 lines
600 B
Plaintext
24 lines
600 B
Plaintext
|
include:
|
||
|
|
- nginx.ng.service
|
||
|
|
|
||
|
|
{%- for domain in salt['pillar.get']('nginx:ng:certificates', {}).keys() %}
|
||
|
|
|
||
|
|
nginx_{{ domain }}_ssl_certificate:
|
||
|
|
file.managed:
|
||
|
|
- name: /etc/nginx/ssl/{{ domain }}.crt
|
||
|
|
- makedirs: True
|
||
|
|
- contents_pillar: nginx:ng:certificates:{{ domain }}:public_cert
|
||
|
|
- watch_in:
|
||
|
|
- service: nginx_service
|
||
|
|
|
||
|
|
nginx_{{ domain }}_ssl_key:
|
||
|
|
file.managed:
|
||
|
|
- name: /etc/nginx/ssl/{{ domain }}.key
|
||
|
|
- mode: 600
|
||
|
|
- makedirs: True
|
||
|
|
- contents_pillar: nginx:ng:certificates:{{ domain }}:private_key
|
||
|
|
- watch_in:
|
||
|
|
- service: nginx_service
|
||
|
|
|
||
|
|
{%- endfor %}
|