summaryrefslogtreecommitdiff
path: root/frontends/Rexfile
diff options
context:
space:
mode:
authorPaul Buetow <paul@buetow.org>2024-11-30 23:52:14 +0200
committerPaul Buetow <paul@buetow.org>2024-11-30 23:52:14 +0200
commit0e5271d40db1838e715e5e9e81acaa83b3164b31 (patch)
treee4c4362344d7fb80623a2e7611f91c5b9621fd7a /frontends/Rexfile
parent291b326e289b41207b77fa601203434fc0ab239b (diff)
refactor OpenBSD frontends so that relayd always does the TLS termination for httpd
Diffstat (limited to 'frontends/Rexfile')
-rw-r--r--frontends/Rexfile5
1 files changed, 3 insertions, 2 deletions
diff --git a/frontends/Rexfile b/frontends/Rexfile
index f7781da..0111489 100644
--- a/frontends/Rexfile
+++ b/frontends/Rexfile
@@ -17,7 +17,7 @@ use File::Slurp;
group frontends => 'blowfish.buetow.org:2', 'fishfinger.buetow.org:2';
our $ircbouncer_server = 'fishfinger.buetow.org:2';
group ircbouncer => $ircbouncer_server;
-group openbsd_canary => 'blowfish.buetow.org:2';
+group openbsd_canary => 'fishfinger.buetow.org:2';
user 'rex';
sudo TRUE;
@@ -255,7 +255,8 @@ task 'relayd', group => 'frontends',
append_if_no_such_line '/etc/rc.conf.local', 'relayd_flags=';
file '/etc/relayd.conf',
- content => template('./etc/relayd.conf.tpl', ipv6address => $ipv6address),
+ content => template('./etc/relayd.conf.tpl',
+ ipv6address => $ipv6address, acme_hosts => \@acme_hosts),
owner => 'root',
group => 'wheel',
mode => '600',