diff options
| author | Emil Renner Berthing <esmil@labitat.dk> | 2023-03-26 01:45:32 +0100 |
|---|---|---|
| committer | Emil Renner Berthing <esmil@labitat.dk> | 2023-03-26 01:56:01 +0100 |
| commit | 29d8c3184cbdf9104bd15757cfb73f6be356a44f (patch) | |
| tree | 35f6a5b43ae053b2452c44debc70b12c02830a81 /roles/space_server/files | |
| parent | 9b3563156ef6cb5cc6d3c4bed2fc9c23adf3a165 (diff) | |
| download | labitat-ansible-29d8c3184cbdf9104bd15757cfb73f6be356a44f.tar.gz labitat-ansible-29d8c3184cbdf9104bd15757cfb73f6be356a44f.tar.xz labitat-ansible-29d8c3184cbdf9104bd15757cfb73f6be356a44f.zip | |
space_server: chrony: Enable NTS server
Diffstat (limited to 'roles/space_server/files')
| -rwxr-xr-x | roles/space_server/files/certbot-chrony.sh | 13 | ||||
| -rw-r--r-- | roles/space_server/files/chrony.conf | 4 |
2 files changed, 17 insertions, 0 deletions
diff --git a/roles/space_server/files/certbot-chrony.sh b/roles/space_server/files/certbot-chrony.sh new file mode 100755 index 0000000..ff48207 --- /dev/null +++ b/roles/space_server/files/certbot-chrony.sh @@ -0,0 +1,13 @@ +#!/bin/bash + +set -e + +case "$RENEWED_LINEAGE" in +*/space.labitat.dk) + install -m640 -o root -g chrony "$RENEWED_LINEAGE/fullchain.pem" /etc/chrony.cert + install -m640 -o root -g chrony "$RENEWED_LINEAGE/privkey.pem" /etc/chrony.key + systemctl restart chronyd.service + ;; +esac + +# vim: set ts=2 sw=2 et: diff --git a/roles/space_server/files/chrony.conf b/roles/space_server/files/chrony.conf index cab1ce4..a26568d 100644 --- a/roles/space_server/files/chrony.conf +++ b/roles/space_server/files/chrony.conf @@ -33,6 +33,10 @@ allow 185.38.175.0/24 allow 10.42.0.0/16 allow 2a01:4262:1ab::/48 +# NTS server certificate and key +ntsservercert /etc/chrony.cert +ntsserverkey /etc/chrony.key + # Allow the system clock to be stepped in the first three updates # if its offset is larger than 1 second. makestep 1.0 3 |