Jonathan Rosser dbc8fe1fe2 Use a certbot pre-hook to ensure haproxy backend is up before renewal ...

We use the built in python3 http server to bring up a temporary backend
on the node which wants to renew a certificate. The timeout set so that
the haproxy health check has noticed the backend come up before certbot
runs.

There is otherwise a race condition between the haproxy healthcheck and
the certbot challenge request arriving at the acme-challenge endpoint.

Change-Id: I2f5f9457c43c68f2881bf9d44f43434ca7b43859

2020-05-07 13:15:54 +00:00

..

haproxy.cfg.j2

Use systemd-journald instead of log files

2019-07-22 19:53:01 +03:00

letsencrypt_pre_hook_certbot_distro.j2

Use a certbot pre-hook to ensure haproxy backend is up before renewal

2020-05-07 13:15:54 +00:00

letsencrypt_renew_certbot_auto.j2

Allow multiple methods of installing certbot

2020-05-05 14:01:23 +00:00

letsencrypt_renew_certbot_distro.j2

Add option to use distro provided certbot package

2020-05-07 13:13:47 +00:00

service.j2

Add extra controls for frontend redirects

2020-04-23 19:32:06 +01:00