debug certif

files/snster-kaz/hoster-b/kaz2/kaz.sh

@@ -33,6 +33,9 @@ export DebugLog="${OUTPUT_DIR}/log/log-kaz-$(date +%y-%m-%d-%T)-"
        cp  "${DIR}/kaz-config/container-${type}.list" /kaz/config/
     done
 
+    # copie certif de la CA locale pour traefik (nécessaire pour ACME/Smallstep)
+    cp /usr/local/share/ca-certificates/root_ca.crt /kaz/dockers/traefik/conf/
+
     echo -e "\n    #### secretGen\n"
     /kaz/bin/secretGen.sh
 

files/snster-kaz/hoster-b/kaz2/provision.sh

@@ -55,13 +55,12 @@ echo "export SNSTERGUARD='true'" >> /root/.bashrc
 
 
 # On place les certifs
-if  [ -f tls/root_ca.crt ]; then
-  cp -ar tls/root_ca.crt /usr/local/share/ca-certificates/
-  /usr/sbin/update-ca-certificates --fresh
-fi
-if  [ -d letsencrypt ]; then
-  cp -ar letsencrypt /etc/
-fi
+cp -ar tls/root_ca.crt /usr/local/share/ca-certificates/
+/usr/sbin/update-ca-certificates --fresh
+
+mkdir -p /etc/letsencrypt/live/kaz.sns
+cp tls/wildcard.crt /etc/letsencrypt/live/kaz.sns/fullchain.pem
+cp tls/wildcard.key /etc/letsencrypt/live/kaz.sns/privkey.pem
 
 # On sauve le proxy APT
 proxy=$(/sbin/ip route | awk '/default/ { print $3 }' | head -1)