[taler-deployment] branch master updated: Fix NGINX certs TLS

[gnunet]

This is an automated email from the git hooks/post-receive script.

javier-sepulveda pushed a commit to branch master
in repository deployment.

The following commit(s) were added to refs/heads/master by this push:
     new afd9c1b  Fix NGINX certs TLS
afd9c1b is described below

commit afd9c1b73b1fdbd1d9170fdf3c6c3d300ceb593c
Author: Javier Sepulveda <javier.sepulveda@uv.es>
AuthorDate: Sat Mar 4 18:48:14 2023 +0100

    Fix NGINX certs TLS
---
 netzbon/config_nginx.sh | 19 +++++++------------
 1 file changed, 7 insertions(+), 12 deletions(-)

diff --git a/netzbon/config_nginx.sh b/netzbon/config_nginx.sh
index 43c4a47..3476213 100755
--- a/netzbon/config_nginx.sh
+++ b/netzbon/config_nginx.sh
@@ -15,28 +15,23 @@ SITES_ENABLED_DIR=/etc/nginx/sites-enabled
 
 sed -i 's/server_name localhost/server_name exchange.${DOMAIN_NAME}/g' 
${SITES_AVAILABLE_DIR}/taler-exchange
 sed -i 's/"localhost"/"exchange.${DOMAIN_NAME}"/g' 
${SITES_AVAILABLE_DIR}/taler-exchange
-ln -s ${SITES_AVAILABLE_DIR}/taler-exchange ${SITES_ENABLED_DIR}/taler-exchange
+ln -s ${SITES_AVAILABLE_DIR}/taler-exchange 
${SITES_ENABLED_DIR}/exchange.${DOMAIN_NAME}
 
 sed -i 's/server_name localhost/server_name merchant.${DOMAIN_NAME}/g' 
${SITES_AVAILABLE_DIR}/taler-merchant
-ln -s ${SITES_AVAILABLE_DIR}/taler-merchant ${SITES_ENABLED_DIR}/taler-merchant
+ln -s ${SITES_AVAILABLE_DIR}/taler-merchant 
${SITES_ENABLED_DIR}/backend.${DOMAIN_NAME}
 
 
 sed -i 's/server_name localhost/server_name bank.${DOMAIN_NAME}/g' 
${SITES_AVAILABLE_DIR}/libeufin-sandbox
-ln -s ${SITES_AVAILABLE_DIR}/libeufin-sandbox 
${SITES_ENABLED_DIR}/libeufin-sandbox
-
+ln -s ${SITES_AVAILABLE_DIR}/libeufin-sandbox 
${SITES_ENABLED_DIR}/bank.${DOMAIN_NAME}
 
 if test ${ENABLE_TLS} = "y"
 then
-    # FIXME-Javier: is this all we need for TLS!?
-    # Likely need to modify configuration above
-    # to listen on 443, and redirect from 80 to 443
-    # and to enable SSL somehow! This is very incomplete!
     say "Obtaining TLS certificates"
 
-    letsencrypt certonly -d \
-                backend.${DOMAIN_NAME} \
-                bank.${DOMAIN_NAME} \
-                exchange.${DOMAIN_NAME}
+    certbot --nginx \
+                -d backend.${DOMAIN_NAME} \
+                -d bank.${DOMAIN_NAME} \
+                -d exchange.${DOMAIN_NAME}
 fi
 
 systemctl start nginx

-- 
To stop receiving notification emails like this one, please contact
gnunet@gnunet.org.