rc/network
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Move VM secrets to a separate password store directory

Browse source
This commit is contained in:
Timotej Lazar 2024-04-08 15:06:18 +02:00
parent 6dcae194d7
commit 000f625988
5 changed files with 10 additions and 10 deletions
Download patch file Download diff file Expand all files Collapse all files

2
roles/certbot_dns/templates/certbot-auth.j2
View file

@ -1,7 +1,7 @@
#!/bin/sh
dns={{ dns[0] }}
ldap_user={{ lookup("passwordstore", "hosts/"~inventory_hostname, subkey="ldap_user") }}
ldap_user={{ lookup("passwordstore", "vm/"~inventory_hostname, subkey="ldap_user") }}
ttl=10
kinit -k -t /etc/krb5.keytab "${ldap_user}"

2
roles/certbot_dns/templates/certbot-cleanup.j2
View file

@ -1,7 +1,7 @@
#!/bin/sh
dns={{ dns[0] }}
ldap_user={{ lookup("passwordstore", "hosts/"~inventory_hostname, subkey="ldap_user") }}
ldap_user={{ lookup("passwordstore", "vm/"~inventory_hostname, subkey="ldap_user") }}
kinit -k -t /etc/krb5.keytab "${ldap_user}"
nsupdate -g <<EOF