Files
dbc8fe1fe2ec675655624ec7ee3996b20ee6e7a4
openstack-ansible-haproxy_s... /templates
Jonathan Rosser dbc8fe1fe2 Use a certbot pre-hook to ensure haproxy backend is up before renewal
We use the built in python3 http server to bring up a temporary backend
on the node which wants to renew a certificate. The timeout set so that
the haproxy health check has noticed the backend come up before certbot
runs.
There is otherwise a race condition between the haproxy healthcheck and
the certbot challenge request arriving at the acme-challenge endpoint.
Change-Id: I2f5f9457c43c68f2881bf9d44f43434ca7b43859
2020年05月07日 13:15:54 +00:00
..
2019年07月22日 19:53:01 +03:00
2020年04月23日 19:32:06 +01:00