This is an automated email from the git hooks/post-receive script.
cbaines pushed a commit to branch master
in repository maintenance.
The following commit(s) were added to refs/heads/master by this push:
new b9366f7b hydra: bayfront: Fix more certificate issues.
b9366f7b is described below
commit b9366f7b9d7a36622bbe7f5e57ff02781cdfaf4a
Author: Christopher Baines <[email protected]>
AuthorDate: Sun Jun 23 21:22:17 2024 +0100
hydra: bayfront: Fix more certificate issues.
* hydra/bayfront.scm (%certbot-configuration): Add
10years.guix.gnu.org.
(%hpc.guix.info-nginx-servers): Switch to the bayfront cert.
(%guix-hpc.bordeaux.inria.fr-nginx-servers): Switch to the bayfront cert.
---
hydra/bayfront.scm | 11 +++++++----
1 file changed, 7 insertions(+), 4 deletions(-)
diff --git a/hydra/bayfront.scm b/hydra/bayfront.scm
index 8905de98..3562fef3 100644
--- a/hydra/bayfront.scm
+++ b/hydra/bayfront.scm
@@ -68,6 +68,9 @@
(certificate-configuration
(domains '("packages.guix.gnu.org"))
(deploy-hook %nginx-deploy-hook))
+ (certificate-configuration
+ (domains '("10years.guix.gnu.org"))
+ (deploy-hook %nginx-deploy-hook))
(certificate-configuration
(domains '("qa.guix.gnu.org"))
(deploy-hook %nginx-deploy-hook))
@@ -491,8 +494,8 @@ add_header X-Frame-Options SAMEORIGIN;"))
(nginx-server-configuration
(server-name '("hpc.guix.info"))
(listen '("443 ssl" "[::]:443 ssl"))
- (ssl-certificate "/etc/letsencrypt/live/hpc.guix.info/fullchain.pem")
- (ssl-certificate-key "/etc/letsencrypt/live/hpc.guix.info/privkey.pem")
+ (ssl-certificate
"/etc/letsencrypt/live/bayfront.guix.gnu.org/fullchain.pem")
+ (ssl-certificate-key
"/etc/letsencrypt/live/bayfront.guix.gnu.org/privkey.pem")
(root "/srv/guix-hpc-web")
(raw-content
(append %disable-last-modified-header
@@ -539,9 +542,9 @@ access_log /var/log/nginx/guix-hpc.access.log;"))
(server-name '("guix-hpc.bordeaux.inria.fr"))
(listen '("443 ssl" "[::]:443 ssl"))
(ssl-certificate
- "/etc/letsencrypt/live/guix-hpc.bordeaux.inria.fr/fullchain.pem")
+ "/etc/letsencrypt/live/bayfront.guix.gnu.org/fullchain.pem")
(ssl-certificate-key
- "/etc/letsencrypt/live/guix-hpc.bordeaux.inria.fr/privkey.pem")
+ "/etc/letsencrypt/live/bayfront.guix.gnu.org/privkey.pem")
(raw-content
(list %common-tls-options
"access_log /var/log/nginx/guix-hpc.access.log;"))
