Sergei Poljanski
4865efd078
All checks were successful
deploy / ansible (push) Successful in 6m25s
The XMPP certificate covers xmpp.asxp.io and conference.asxp.io, which point at asxpio-services, so Let's Encrypt validates them there. A small nginx on port 80 passes /.well-known/acme-challenge/ over the VPC to Traefik, which holds all certificates, and answers 404 to the rest. Assisted-by: Claude:opus-5-5
8 lines
392 B
YAML
8 lines
392 B
YAML
---
|
|
# The XMPP certificate is issued by Traefik on asxpio-ops (HTTP challenge;
|
|
# services forwards its challenges there, role acme_forward) and pushed to
|
|
# ejabberd on asxpio-services on every renewal (role xmpp_cert_sync).
|
|
xmpp_cert_main: xmpp.asxp.io
|
|
xmpp_cert_sans: [asxp.io, conference.asxp.io]
|
|
# renovate: datasource=docker depName=nginx
|
|
acme_forward_nginx_version: "1.31.8-alpine-slim"
|