From b313368376d3c831b0347e171b2fd2a9da4a1eaf Mon Sep 17 00:00:00 2001
From: Johannes Stoelp <johannes.stoelp@gmail.com>
Date: Wed, 28 Aug 2024 23:51:26 +0200
Subject: nginx: persist ssl keys, add ssl key spec in one server block as the
 nginx docker image parses the information from that (not includes)

---
 roles/webserver/tasks/main.yml | 1 +
 1 file changed, 1 insertion(+)

(limited to 'roles/webserver/tasks')

diff --git a/roles/webserver/tasks/main.yml b/roles/webserver/tasks/main.yml
index 5e8be87..381ac21 100644
--- a/roles/webserver/tasks/main.yml
+++ b/roles/webserver/tasks/main.yml
@@ -28,6 +28,7 @@
       # Use 'Z' to privately relable selinux contexts.
       - "{{ DATA_ROOT }}/nginx/user_conf.d:/etc/nginx/user_conf.d:ro,Z"
       - "{{ DATA_ROOT }}/nginx/inc:/etc/nginx/inc:ro,Z"
+      - "{{ DATA_ROOT }}/nginx/certs:/etc/letsencrypt:Z"
       # Use 'z' to shared-ly relable selinux contexts.
       - "{{ DATA_ROOT }}/nginx/www:/www:ro,z"
 
-- 
cgit v1.2.3