summaryrefslogtreecommitdiff
path: root/roles/apps/coturn/templates
diff options
context:
space:
mode:
Diffstat (limited to 'roles/apps/coturn/templates')
-rw-r--r--roles/apps/coturn/templates/acmetool-reload.sh.j228
-rw-r--r--roles/apps/coturn/templates/nginx-vhost.conf.j227
2 files changed, 0 insertions, 55 deletions
diff --git a/roles/apps/coturn/templates/acmetool-reload.sh.j2 b/roles/apps/coturn/templates/acmetool-reload.sh.j2
deleted file mode 100644
index 08530583..00000000
--- a/roles/apps/coturn/templates/acmetool-reload.sh.j2
+++ /dev/null
@@ -1,28 +0,0 @@
-#!/bin/sh
-set -e
-EVENT_NAME="$1"
-[ "$EVENT_NAME" = "live-updated" ] || exit 42
-
-MAIN_HOSTNAME="{{ coturn_hostnames[0] }}"
-SSL_D="{{ coturn_base_path }}/{{ coturn_realm }}/config/ssl"
-
-while read name; do
- certdir="$ACME_STATE_DIR/live/$name"
- if [ -z "$name" -o ! -e "$certdir" ]; then
- continue
- fi
- if [ "$name" != "$MAIN_HOSTNAME" ]; then
- continue
- fi
-
- install -m 0644 -o root -g coturn "$certdir/fullchain" "$SSL_D/cert.pem"
- install -m 0640 -o root -g coturn "$certdir/privkey" "$SSL_D/privkey.pem"
-
- pod_id=$(crictl pods -q --state ready --name "^coturn-{{ coturn_realm }}-{{ ansible_nodename }}$")
- [ -n "$pod_id" ] || exit 42
- container_id=$(crictl ps -q --name '^coturn$' -p "$pod_id")
- [ -n "$container_id" ] || exit 42
- crictl stop "$container_id"
-
- break
-done
diff --git a/roles/apps/coturn/templates/nginx-vhost.conf.j2 b/roles/apps/coturn/templates/nginx-vhost.conf.j2
deleted file mode 100644
index 0639fbe1..00000000
--- a/roles/apps/coturn/templates/nginx-vhost.conf.j2
+++ /dev/null
@@ -1,27 +0,0 @@
-server {
- listen 80;
- listen [::]:80;
- server_name {{ coturn_hostnames | join(' ') }};
-
- include snippets/acmetool.conf;
-
- location / {
- return 301 https://$host$request_uri;
- }
-}
-
-server {
- listen 443 ssl http2;
- listen [::]:443 ssl http2;
- server_name {{ coturn_hostnames | join(' ') }};
-
- include snippets/acmetool.conf;
- include snippets/tls.conf;
- ssl_certificate /var/lib/acme/live/{{ coturn_hostnames[0] }}/fullchain;
- ssl_certificate_key /var/lib/acme/live/{{ coturn_hostnames[0] }}/privkey;
- include snippets/hsts.conf;
-
- location / {
- return 404;
- }
-}