|
|
|
@ -1,4 +1,4 @@
|
|
|
|
|
variable "ACME_REG2_EMAIL" {}
|
|
|
|
|
variable "ACME_REG_EMAIL" {}
|
|
|
|
|
|
|
|
|
|
locals {
|
|
|
|
|
domain = "meatballhat.com"
|
|
|
|
@ -125,18 +125,18 @@ resource "dnsimple_record" "protonmail_mx" {
|
|
|
|
|
type = "MX"
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
resource "tls_private_key" "acme_reg2_key" {
|
|
|
|
|
resource "tls_private_key" "acme_reg_key" {
|
|
|
|
|
algorithm = "ECDSA"
|
|
|
|
|
ecdsa_curve = "P384"
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
resource "acme_registration" "reg2" {
|
|
|
|
|
account_key_pem = tls_private_key.acme_reg2_key.private_key_pem
|
|
|
|
|
email_address = var.ACME_REG2_EMAIL
|
|
|
|
|
resource "acme_registration" "reg" {
|
|
|
|
|
account_key_pem = tls_private_key.acme_reg_key.private_key_pem
|
|
|
|
|
email_address = var.ACME_REG_EMAIL
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
resource "acme_certificate" "main_cert2" {
|
|
|
|
|
account_key_pem = acme_registration.reg2.account_key_pem
|
|
|
|
|
resource "acme_certificate" "main_cert" {
|
|
|
|
|
account_key_pem = acme_registration.reg.account_key_pem
|
|
|
|
|
common_name = "secure.${local.domain}"
|
|
|
|
|
key_type = "P384"
|
|
|
|
|
subject_alternative_names = [
|
|
|
|
@ -154,17 +154,17 @@ resource "acme_certificate" "main_cert2" {
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
output "main_cert2" {
|
|
|
|
|
output "main_cert" {
|
|
|
|
|
sensitive = true
|
|
|
|
|
value = {
|
|
|
|
|
certificate_pem = acme_certificate.main_cert2.certificate_pem,
|
|
|
|
|
certificate_url = acme_certificate.main_cert2.certificate_url,
|
|
|
|
|
issuer_pem = acme_certificate.main_cert2.issuer_pem,
|
|
|
|
|
private_key_pem = acme_certificate.main_cert2.private_key_pem,
|
|
|
|
|
certificate_pem = acme_certificate.main_cert.certificate_pem,
|
|
|
|
|
certificate_url = acme_certificate.main_cert.certificate_url,
|
|
|
|
|
issuer_pem = acme_certificate.main_cert.issuer_pem,
|
|
|
|
|
private_key_pem = acme_certificate.main_cert.private_key_pem,
|
|
|
|
|
|
|
|
|
|
chained_pem = join("\n", [
|
|
|
|
|
acme_certificate.main_cert2.certificate_pem,
|
|
|
|
|
acme_certificate.main_cert2.issuer_pem,
|
|
|
|
|
acme_certificate.main_cert.certificate_pem,
|
|
|
|
|
acme_certificate.main_cert.issuer_pem,
|
|
|
|
|
])
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|