summaryrefslogtreecommitdiffstats
path: root/theos/certs/theos_kyriasis_com.sls
diff options
context:
space:
mode:
Diffstat (limited to 'theos/certs/theos_kyriasis_com.sls')
-rw-r--r--theos/certs/theos_kyriasis_com.sls56
1 files changed, 56 insertions, 0 deletions
diff --git a/theos/certs/theos_kyriasis_com.sls b/theos/certs/theos_kyriasis_com.sls
new file mode 100644
index 0000000..88d0f22
--- /dev/null
+++ b/theos/certs/theos_kyriasis_com.sls
@@ -0,0 +1,56 @@
+include:
+ - nginx.ng
+
+theos.kyriasis.com:
+ acme.cert:
+ - email: johannes@kyriasis.com
+ - webroot: /srv/http/
+ - keysize: 4096
+
+ - watch_in:
+ - service: nginx_service
+ - require_in:
+ - service: nginx_service
+
+smtpd-access-theos:
+ acl.present:
+ - name: /etc/letsencrypt/archive/theos.kyriasis.com/
+ - acl_type: user
+ - acl_name: smtpd
+ - perms: r
+ - recurse: True
+ - require_in:
+ - acme: theos.kyriasis.com
+
+ldap-access-theos:
+ acl.present:
+ - name: /etc/letsencrypt/archive/theos.kyriasis.com/
+ - acl_type: user
+ - acl_name: ldap
+ - perms: r
+ - recurse: True
+ - require_in:
+ - acme: theos.kyriasis.com
+
+znc-access-theos:
+ acl.present:
+ - name: /etc/letsencrypt/archive/theos.kyriasis.com/
+ - acl_type: user
+ - acl_name: snc
+ - perms: r
+ - recurse: True
+ - require_in:
+ - acme: theos.kyriasis.com
+
+kyrias-access-theos:
+ acl.present:
+ - name: /etc/letsencrypt/archive/theos.kyriasis.com/
+ - acl_type: user
+ - acl_name: kyrias
+ - perms: r
+ - recurse: True
+ - require_in:
+ - acme: theos.kyriasis.com
+
+
+# vim: set ft=yaml et: