change: Only install certbot on main manager node

This commit is contained in:
2025-08-03 16:53:37 +02:00
parent 141c9931c6
commit d51e870e50
5 changed files with 6 additions and 5 deletions
@@ -78,7 +78,7 @@ resource "hcloud_server" "node" {
github_public_ssh_key : var.github_public_ssh_key github_public_ssh_key : var.github_public_ssh_key
main_node : count.index == 0 main_node : count.index == 0
packages_setup : base64encode(templatefile("${path.module}/templates/scripts/install-packages.sh.tftpl", { packages_setup : base64encode(templatefile("${path.module}/templates/scripts/install-packages.sh.tftpl", {
manager_node : true main_node : count.index == 0
})) }))
firewall_setup : base64encode(templatefile("${path.module}/templates/scripts/firewall-setup.sh.tftpl", { firewall_setup : base64encode(templatefile("${path.module}/templates/scripts/firewall-setup.sh.tftpl", {
node_ip : var.private_node_ips[count.index] node_ip : var.private_node_ips[count.index]
@@ -76,7 +76,7 @@ resource "hcloud_server" "worker_node" {
admin_user : var.admin_user admin_user : var.admin_user
terraform_public_ssh_key : var.terraform_public_ssh_key terraform_public_ssh_key : var.terraform_public_ssh_key
packages_setup : base64encode(templatefile("${path.module}/templates/scripts/install-packages.sh.tftpl", { packages_setup : base64encode(templatefile("${path.module}/templates/scripts/install-packages.sh.tftpl", {
manager_node : false main_node : false
})) }))
firewall_setup : base64encode(templatefile("${path.module}/templates/scripts/firewall-setup.sh.tftpl", { firewall_setup : base64encode(templatefile("${path.module}/templates/scripts/firewall-setup.sh.tftpl", {
node_ip : var.private_node_ips[count.index] node_ip : var.private_node_ips[count.index]
@@ -41,12 +41,12 @@ write_files:
path: /run/tmpfiles.d/sysctl-setup.sh path: /run/tmpfiles.d/sysctl-setup.sh
encoding: base64 encoding: base64
defer: true defer: true
%{ if main_node ~}
- owner: root:root - owner: root:root
content: "${certbot_setup}" content: "${certbot_setup}"
path: /run/tmpfiles.d/certbot-setup.sh path: /run/tmpfiles.d/certbot-setup.sh
encoding: base64 encoding: base64
defer: true defer: true
%{ if main_node ~}
- owner: root:root - owner: root:root
content: "${swarm_setup}" content: "${swarm_setup}"
path: /run/tmpfiles.d/swarm-setup.sh path: /run/tmpfiles.d/swarm-setup.sh
@@ -59,7 +59,7 @@ runcmd:
- /usr/local/bin/firewall-setup.sh - /usr/local/bin/firewall-setup.sh
- /usr/local/bin/ssh-setup.sh - /usr/local/bin/ssh-setup.sh
- /usr/local/bin/sysctl-setup.sh - /usr/local/bin/sysctl-setup.sh
- /usr/local/bin/certbot-setup.sh
%{ if main_node ~} %{ if main_node ~}
- /usr/local/bin/certbot-setup.sh
- /usr/local/bin/swarm-setup.sh - /usr/local/bin/swarm-setup.sh
%{ endif ~} %{ endif ~}
@@ -1,3 +1,4 @@
#!/bin/bash #!/bin/bash
mkdir -p /var/www/certbot mkdir -p /var/www/certbot
mkdir -p /etc/letsencrypt
@@ -22,6 +22,6 @@ apt-get -y install ufw
curl https://packages.hetzner.com/hcloud/deb/hc-utils_0.0.4-1_all.deb -o /run/tmpfiles.d/hc-utils_0.0.4-1_all.deb -s curl https://packages.hetzner.com/hcloud/deb/hc-utils_0.0.4-1_all.deb -o /run/tmpfiles.d/hc-utils_0.0.4-1_all.deb -s
apt-get -y install /run/tmpfiles.d/hc-utils_0.0.4-1_all.deb apt-get -y install /run/tmpfiles.d/hc-utils_0.0.4-1_all.deb
%{if manager_node ~} %{if main_node ~}
apt-get -y install certbot apt-get -y install certbot
%{endif ~} %{endif ~}