fix: Add missing setup for known hosts

This commit is contained in:
2025-08-04 22:36:29 +02:00
parent 3a6b841724
commit 93e3872b4f
2 changed files with 4 additions and 1 deletions
@@ -98,7 +98,7 @@ resource "hcloud_server" "node" {
certsync_private_ssh_key : var.certsync_private_ssh_key
}))
certsync_setup : base64encode(templatefile("${path.module}/templates/scripts/certsync-setup.sh.tftpl", {
manager_nodes: slice(var.private_node_ips, 1, var.number_nodes)
}))
certsync : base64encode(templatefile("${path.module}/templates/scripts/certsync.sh.tftpl", {
manager_nodes: slice(var.private_node_ips, 1, var.number_nodes)
@@ -2,3 +2,6 @@
ln /usr/local/bin/certsync.sh /etc/letsencrypt/renewal-hooks/deploy/certsync.sh
chmod +x /etc/letsencrypt/renewal-hooks/deploy/certsync.sh
%{for manager_node_ip in manager_nodes ~}
su certsync -c ssh-keyscan -t ed25519 ${manager_node_ip} >> /home/certsync/.ssh/known_hosts
%{endfor ~}