fixes key issues

This commit is contained in:
Keagan McClelland
2020-08-04 16:33:21 -06:00
parent c75c9fd250
commit 5df3523f87
2 changed files with 7 additions and 5 deletions

View File

@@ -46,8 +46,10 @@ doesSslNeedRenew cert = do
ec <- liftIO $ system [i|openssl x509 -checkend 2592000 -noout -in #{cert}|]
pure $ ec /= ExitSuccess
renewSslCerts :: FilePath -> ReaderT RegistryCtx IO ()
renewSslCerts cert = do
domain <- asks $ registryHostname . appSettings
renewSslCerts :: ReaderT RegistryCtx IO ()
renewSslCerts = do
domain <- asks $ registryHostname . appSettings
(cert, key) <- asks $ (sslCertLocation &&& sslKeyLocation) . appSettings
void . liftIO $ system [i|certbot renew --dry-run|]
void . liftIO $ system [i|cp /etc/letsencrypt/live/#{domain}/fullchain.pem #{cert}|]
void . liftIO $ system [i|cp /etc/letsencrypt/live/#{domain}/privkey.pem #{key}|]