some progress...

files/snster-kaz/kaz/prod/dns.conf

@@ -9,12 +9,21 @@ $ORIGIN kaz.milxc.
 			     )
        IN  NS     ns.kaz.milxc.
        IN  MX  10 smtp.kaz.milxc.
+			 IN	A	100.80.0.2
 ns    IN  A      100.80.0.2
 dmz   IN A 100.80.0.2
 smtp  IN CNAME 	dmz
 imap  IN CNAME 	dmz
 www   IN CNAME 	dmz
 mail	IN	CNAME	dmz
+cloud	IN	CNAME	dmz
+tableur	IN	CNAME	dmz
+webmail	IN	CNAME	dmz
+garradin	IN	CNAME	dmz
+wiki	IN	CNAME	dmz
+git	IN	CNAME	dmz
+office	IN	CNAME	dmz
+depot	IN	CNAME	dmz
 listes	IN	MX	10	listes
 listes	IN	A	100.80.1.2
 firewall   IN A 100.80.0.1

files/snster-kaz/kaz/prod/kaz/config/container-withoutMail.list

@@ -3,7 +3,7 @@ jirafeau
 ethercalc
 collabora
 ethercalc
-etherpad
+#etherpad
 ldap
 quotas
 web

files/snster-kaz/kaz/prod/kaz/config/dockers.env

@@ -4,7 +4,7 @@
 
 #######################################
 # prod / dev / local
-mode=prod
+mode=local
 
 ########################################
 # choix du domaine

files/snster-kaz/kaz/prod/provision.sh

@@ -44,17 +44,25 @@ EOF
 fi
 
 
-# On met le KAZGUARD pour la mise au point
-echo "export KAZGUARD='true'" >> /root/.bashrc
+# On met le GUARD pour la mise au point
+echo "export SNSTERGUARD='true'" >> /root/.bashrc
 
 # On active fuse-overlayfs pour docker
 cat >> /etc/docker/daemon.json <<EOF
 { "storage-driver": "fuse-overlayfs" }
 EOF
 service docker restart
-mknod -m 666 /dev/fuse c 10 229 # + dans le rc.local ? + modprobe fuse sur l'ĥôte ?
+echo -e '#!/bin/sh\nmknod -m 666 /dev/fuse c 10 229' >> /etc/rc.local
+chmod +x /etc/rc.local
 
-./kaz.sh
+# On place les certifs
+if  [ -d letsencrypt ]; then
+  cp -ar letsencrypt /etc/
+  cp /etc/letsencrypt/local/rootCA.pem /usr/local/share/ca-certificates/rootCA.crt
+  /usr/sbin/update-ca-certificates --fresh
+fi
+
+# ./kaz.sh
 
 # clear apt cache
 DEBIAN_FRONTEND=noninteractive apt-get autoremove -y