Skip to content
Snippets Groups Projects
Verified Commit f0a0060c authored by Evangelos Foutras's avatar Evangelos Foutras :smiley_cat:
Browse files

postgres: fix letsencrypt renewal hook

It was using a nonexistent target path when copying the renewed cert and
was not reloading postgresql.service in order for it to reload the certs.
parent 343a141e
No related branches found
No related tags found
No related merge requests found
Pipeline #17613 passed
......@@ -7,9 +7,13 @@ postgres_domain="{{ inventory_hostname }}"
for domain in $RENEWED_DOMAINS; do
case "$domain" in
$postgres_domain)
for pem in /etc/letsencrypt/live/$postgres_domain/{privkey,fullchain,chain}.pem; do
install -o postgres -g postgres -m 400 $pem /var/lib/postgres/data/$pem
for pem in {privkey,fullchain,chain}.pem; do
install -o postgres -g postgres -m 400 \
/etc/letsencrypt/live/$postgres_domain/$pem \
/var/lib/postgres/data/$pem
done
systemctl reload postgresql
break
;;
esac
done
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment