certbot

.deploy/deploy-dev.yaml

@@ -8,6 +8,7 @@ services:
       - "443:443"
     volumes:
       - certs:/etc/letsencrypt
+      - certbot-html:/var/www/html
     deploy:
       mode: replicated
       replicas: 1
@@ -102,8 +103,27 @@ services:
         parallelism: 1
         order: start-first
 
+  certbot:
+    image: certbot/certbot
+    volumes:
+      - certs:/etc/letsencrypt
+      - certbot-html:/var/www/html
+    command: certonly --webroot --webroot-path=/var/www/html --email emmtvv@gmail.com --agree-tos --no-eff-email -d "*.develop.sprinthub.ru"
+    deploy:
+      mode: replicated
+      placement:
+        constraints: [node.role == manager]
+      restart_policy:
+        condition: any
+        delay: 720h # each month
+      update_config:
+        parallelism: 1
+        order: start-first
+
 volumes:
   minio_data:
     driver: local
   certs:
+    driver: local
+  certbot-html:
     driver: local

nginx/nginx-dev/nginx-dev.conf

@@ -2,6 +2,18 @@ events {}
 
 http {
     client_max_body_size 50m;
+
+    server {
+        listen      80;
+        listen      [::]:80;
+        server_name *.develop.sprinthub.ru;
+
+        location ~ /.well-known/acme-challenge {
+            allow all;
+            root /var/www/html;
+        }
+    }
+    
     server {
         listen      80;
         server_name dev.develop.sprinthub.ru;
@@ -11,15 +23,6 @@ http {
         }
     }
 
-    server {
-        listen      80;
-        server_name telegram.develop.sprinthub.ru;
-
-        location / {
-            proxy_pass http://web.telegram.org/;
-        }
-    }
-
     server {
         listen      80;
         server_name swarmpit.develop.sprinthub.ru;