fix: Add missing steps to complete certificate sync

This commit is contained in:
2025-08-04 23:15:39 +02:00
parent 578c0a079a
commit 0cf6717f84
2 changed files with 6 additions and 4 deletions
@@ -19,7 +19,7 @@ users:
- ${github_public_ssh_key}
- name: certsync
groups: users
sudo: ALL=(ALL) NOPASSWD:/usr/bin/rsync
sudo: ALL=(ALL) NOPASSWD:/usr/bin/rsync,/usr/bin/chown
ssh_authorized_keys:
- ${certsync_public_ssh_key}
package_update: true
@@ -1,8 +1,10 @@
#!/bin/sh
rsync -avzr /etc/letsencrypt /home/certsync/letsencrypt
rsync -azr /etc/letsencrypt /home/certsync/letsencrypt
chown -R certsync:certsync /home/certsync/letsencrypt
%{for manager_node_ip in manager_nodes ~}
su -c "rsync -avzr /home/certsync/letsencrypt certsync@${manager_node_ip}:/home/certsync/" - certsync
su -c "ssh certsync@${manager_node_ip} sudo rsync -avzr /home/certsync/letsencrypt /etc/letsencrypt" - certsync
su -c "rsync -azr /home/certsync/letsencrypt certsync@${manager_node_ip}:/home/certsync/" - certsync
su -c "ssh certsync@${manager_node_ip} sudo rsync -azr /home/certsync/letsencrypt/. /etc/letsencrypt"
su -c "ssh certsync@${manager_node_ip} sudo chown -R root:root /etc/letsencrypt" - certsync
%{endfor ~}
docker service update --force nginx_nginx-proxy