Upgrade acme cert bits

main
Dan Buch 2 months ago
parent 510a292607
commit d34b495a9c
Signed by: meatballhat
GPG Key ID: A12F782281063434

@ -1,4 +1,4 @@
variable "ACME_REG2_EMAIL" {}
variable "ACME_REG_EMAIL" {}
locals {
domain = "meatballhat.com"
@ -125,18 +125,18 @@ resource "dnsimple_record" "protonmail_mx" {
type = "MX"
}
resource "tls_private_key" "acme_reg2_key" {
resource "tls_private_key" "acme_reg_key" {
algorithm = "ECDSA"
ecdsa_curve = "P384"
}
resource "acme_registration" "reg2" {
account_key_pem = tls_private_key.acme_reg2_key.private_key_pem
email_address = var.ACME_REG2_EMAIL
resource "acme_registration" "reg" {
account_key_pem = tls_private_key.acme_reg_key.private_key_pem
email_address = var.ACME_REG_EMAIL
}
resource "acme_certificate" "main_cert2" {
account_key_pem = acme_registration.reg2.account_key_pem
resource "acme_certificate" "main_cert" {
account_key_pem = acme_registration.reg.account_key_pem
common_name = "secure.${local.domain}"
key_type = "P384"
subject_alternative_names = [
@ -154,17 +154,17 @@ resource "acme_certificate" "main_cert2" {
}
}
output "main_cert2" {
output "main_cert" {
sensitive = true
value = {
certificate_pem = acme_certificate.main_cert2.certificate_pem,
certificate_url = acme_certificate.main_cert2.certificate_url,
issuer_pem = acme_certificate.main_cert2.issuer_pem,
private_key_pem = acme_certificate.main_cert2.private_key_pem,
certificate_pem = acme_certificate.main_cert.certificate_pem,
certificate_url = acme_certificate.main_cert.certificate_url,
issuer_pem = acme_certificate.main_cert.issuer_pem,
private_key_pem = acme_certificate.main_cert.private_key_pem,
chained_pem = join("\n", [
acme_certificate.main_cert2.certificate_pem,
acme_certificate.main_cert2.issuer_pem,
acme_certificate.main_cert.certificate_pem,
acme_certificate.main_cert.issuer_pem,
])
}
}

Loading…
Cancel
Save