From 2a9ef9ae79694c121787664e9c7e1b2c50b703b5 Mon Sep 17 00:00:00 2001
From: s3lph <account-gitlab-ideynizv@kernelpanic.lol>
Date: Fri, 18 Dec 2020 04:29:55 +0100
Subject: [PATCH] Add inspircd certificate renewal hook
---
roles/inspircd/tasks/install.yml | 8 ++++++++
.../templates/usr/local/bin/acme-deploy-inspircd.j2 | 6 ++++++
2 files changed, 14 insertions(+)
create mode 100644 roles/inspircd/templates/usr/local/bin/acme-deploy-inspircd.j2
diff --git a/roles/inspircd/tasks/install.yml b/roles/inspircd/tasks/install.yml
index a07eccc..59750bb 100644
--- a/roles/inspircd/tasks/install.yml
+++ b/roles/inspircd/tasks/install.yml
@@ -11,3 +11,11 @@
- name: install inspircd
package:
name: inspircd
+
+- name: install inspircd acme deploy hook
+ template:
+ src: usr/local/bin/acme-deploy-inspircd.j2
+ dest: /usr/local/bin/acme-deploy-inspircd
+ owner: root
+ group: root
+ mode: 0755
diff --git a/roles/inspircd/templates/usr/local/bin/acme-deploy-inspircd.j2 b/roles/inspircd/templates/usr/local/bin/acme-deploy-inspircd.j2
new file mode 100644
index 0000000..1fe2b51
--- /dev/null
+++ b/roles/inspircd/templates/usr/local/bin/acme-deploy-inspircd.j2
@@ -0,0 +1,6 @@
+#!/bin/bash
+{{ ansible_managed | comment }}
+
+/usr/bin/install --owner=irc --group=irc --mode=0644 ${RENEWED_LINEAGE}/fullchain.pem /etc/inspircd/ssl.crt
+/usr/bin/install --owner=irc --group=irc --mode=0600 ${RENEWED_LINEAGE}/privkey.pem /etc/inspircd/ssl.key
+/usr/bin/pkill -USR1 inspircd