Herron has uploaded a new change for review. ( 
https://gerrit.wikimedia.org/r/384591 )

Change subject: MX: Change Exim configuration to use letsencrypt certificate
......................................................................

MX: Change Exim configuration to use letsencrypt certificate

Change exim confiuration to use letsencrypt cert files located in /etc/acme.

This is to renew the MX certificates whcih expire at the end of the month as
well as migrate MX certs to letsencrypt.

Bug: T174081
Change-Id: I5eb46ff3e60fb7b230458ebdd8627b8882320e77
---
M modules/role/templates/exim/exim4.conf.mx.erb
1 file changed, 2 insertions(+), 2 deletions(-)


  git pull ssh://gerrit.wikimedia.org:29418/operations/puppet 
refs/changes/91/384591/1

diff --git a/modules/role/templates/exim/exim4.conf.mx.erb 
b/modules/role/templates/exim/exim4.conf.mx.erb
index 4c603f8..e3bd335 100644
--- a/modules/role/templates/exim/exim4.conf.mx.erb
+++ b/modules/role/templates/exim/exim4.conf.mx.erb
@@ -94,8 +94,8 @@
 keep_environment =
 
 # TLS
-tls_certificate = /etc/ssl/localcerts/mail.wikimedia.org.chained.crt
-tls_privatekey = /etc/ssl/private/mail.wikimedia.org.key
+tls_certificate = /etc/acme/cert/<%= @hostname %>.chained.crt
+tls_privatekey = /etc/acme/key/<%= @hostname %>.key
 tls_advertise_hosts = *
 
 # force Gmail over IPv4 due to reports of bad spam reputation over IPv6

-- 
To view, visit https://gerrit.wikimedia.org/r/384591
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings

Gerrit-MessageType: newchange
Gerrit-Change-Id: I5eb46ff3e60fb7b230458ebdd8627b8882320e77
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Herron <[email protected]>

_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits

Reply via email to