From d34b495a9cc54c79ffa22c7fc1d15a867cbe8f1f Mon Sep 17 00:00:00 2001 From: Dan Buch Date: Sun, 26 Mar 2023 11:32:41 -0400 Subject: [PATCH] Upgrade acme cert bits --- meatballhat.com/main.tf | 28 ++++++++++++++-------------- 1 file changed, 14 insertions(+), 14 deletions(-) diff --git a/meatballhat.com/main.tf b/meatballhat.com/main.tf index 3deb29c..74da8f9 100644 --- a/meatballhat.com/main.tf +++ b/meatballhat.com/main.tf @@ -1,4 +1,4 @@ -variable "ACME_REG2_EMAIL" {} +variable "ACME_REG_EMAIL" {} locals { domain = "meatballhat.com" @@ -125,18 +125,18 @@ resource "dnsimple_record" "protonmail_mx" { type = "MX" } -resource "tls_private_key" "acme_reg2_key" { +resource "tls_private_key" "acme_reg_key" { algorithm = "ECDSA" ecdsa_curve = "P384" } -resource "acme_registration" "reg2" { - account_key_pem = tls_private_key.acme_reg2_key.private_key_pem - email_address = var.ACME_REG2_EMAIL +resource "acme_registration" "reg" { + account_key_pem = tls_private_key.acme_reg_key.private_key_pem + email_address = var.ACME_REG_EMAIL } -resource "acme_certificate" "main_cert2" { - account_key_pem = acme_registration.reg2.account_key_pem +resource "acme_certificate" "main_cert" { + account_key_pem = acme_registration.reg.account_key_pem common_name = "secure.${local.domain}" key_type = "P384" subject_alternative_names = [ @@ -154,17 +154,17 @@ resource "acme_certificate" "main_cert2" { } } -output "main_cert2" { +output "main_cert" { sensitive = true value = { - certificate_pem = acme_certificate.main_cert2.certificate_pem, - certificate_url = acme_certificate.main_cert2.certificate_url, - issuer_pem = acme_certificate.main_cert2.issuer_pem, - private_key_pem = acme_certificate.main_cert2.private_key_pem, + certificate_pem = acme_certificate.main_cert.certificate_pem, + certificate_url = acme_certificate.main_cert.certificate_url, + issuer_pem = acme_certificate.main_cert.issuer_pem, + private_key_pem = acme_certificate.main_cert.private_key_pem, chained_pem = join("\n", [ - acme_certificate.main_cert2.certificate_pem, - acme_certificate.main_cert2.issuer_pem, + acme_certificate.main_cert.certificate_pem, + acme_certificate.main_cert.issuer_pem, ]) } }