docs(provision): add salt usage with roles in multi-host
[arvados.git] / tools / salt-install / config_examples / multi_host / aws / pillars / letsencrypt.sls
1 ---
2 # Copyright (C) The Arvados Authors. All rights reserved.
3 #
4 # SPDX-License-Identifier: AGPL-3.0
5
6 ### LETSENCRYPT
7 letsencrypt:
8   use_package: true
9   pkgs:
10     - certbot: latest
11     - python3-certbot-nginx
12   config:
13     server: https://acme-v02.api.letsencrypt.org/directory
14     email: __INITIAL_USER_EMAIL__
15     authenticator: nginx
16     webroot-path: /var/www
17     agree-tos: true
18     keep-until-expiring: true
19     expand: true
20     max-log-backups: 0
21     deploy-hook: systemctl reload nginx
22
23 ### NGINX
24 nginx:
25   ### SNIPPETS
26   snippets:
27     ### LETSENCRYPT DEFAULT PATH
28     letsencrypt_well_known.conf:
29       - location /.well-known:
30         - root: /var/www