From 93e3872b4fbd7ab71a496b165de98b540b367d08 Mon Sep 17 00:00:00 2001 From: Jim Martens Date: Mon, 4 Aug 2025 22:36:29 +0200 Subject: [PATCH] fix: Add missing setup for known hosts --- terraform/modules/docker-network/swarm-manager-node.tf | 2 +- .../docker-network/templates/scripts/certsync-setup.sh.tftpl | 3 +++ 2 files changed, 4 insertions(+), 1 deletion(-) diff --git a/terraform/modules/docker-network/swarm-manager-node.tf b/terraform/modules/docker-network/swarm-manager-node.tf index 4957fca..492933c 100644 --- a/terraform/modules/docker-network/swarm-manager-node.tf +++ b/terraform/modules/docker-network/swarm-manager-node.tf @@ -98,7 +98,7 @@ resource "hcloud_server" "node" { certsync_private_ssh_key : var.certsync_private_ssh_key })) certsync_setup : base64encode(templatefile("${path.module}/templates/scripts/certsync-setup.sh.tftpl", { - + manager_nodes: slice(var.private_node_ips, 1, var.number_nodes) })) certsync : base64encode(templatefile("${path.module}/templates/scripts/certsync.sh.tftpl", { manager_nodes: slice(var.private_node_ips, 1, var.number_nodes) diff --git a/terraform/modules/docker-network/templates/scripts/certsync-setup.sh.tftpl b/terraform/modules/docker-network/templates/scripts/certsync-setup.sh.tftpl index 80acc21..92e5ab6 100644 --- a/terraform/modules/docker-network/templates/scripts/certsync-setup.sh.tftpl +++ b/terraform/modules/docker-network/templates/scripts/certsync-setup.sh.tftpl @@ -2,3 +2,6 @@ ln /usr/local/bin/certsync.sh /etc/letsencrypt/renewal-hooks/deploy/certsync.sh chmod +x /etc/letsencrypt/renewal-hooks/deploy/certsync.sh +%{for manager_node_ip in manager_nodes ~} +su certsync -c ssh-keyscan -t ed25519 ${manager_node_ip} >> /home/certsync/.ssh/known_hosts +%{endfor ~}