diff --git a/.deploy/deploy-dev.yaml b/.deploy/deploy-dev.yaml index 197505a..b888478 100644 --- a/.deploy/deploy-dev.yaml +++ b/.deploy/deploy-dev.yaml @@ -8,6 +8,7 @@ services: - "443:443" volumes: - certs:/etc/letsencrypt + - certbot-html:/var/www/html deploy: mode: replicated replicas: 1 @@ -102,8 +103,27 @@ services: parallelism: 1 order: start-first + certbot: + image: certbot/certbot + volumes: + - certs:/etc/letsencrypt + - certbot-html:/var/www/html + command: certonly --webroot --webroot-path=/var/www/html --email emmtvv@gmail.com --agree-tos --no-eff-email -d "*.develop.sprinthub.ru" + deploy: + mode: replicated + placement: + constraints: [node.role == manager] + restart_policy: + condition: any + delay: 720h # each month + update_config: + parallelism: 1 + order: start-first + volumes: minio_data: driver: local certs: + driver: local + certbot-html: driver: local \ No newline at end of file diff --git a/nginx/nginx-dev/nginx-dev.conf b/nginx/nginx-dev/nginx-dev.conf index c68767f..9c09313 100644 --- a/nginx/nginx-dev/nginx-dev.conf +++ b/nginx/nginx-dev/nginx-dev.conf @@ -2,6 +2,18 @@ events {} http { client_max_body_size 50m; + + server { + listen 80; + listen [::]:80; + server_name *.develop.sprinthub.ru; + + location ~ /.well-known/acme-challenge { + allow all; + root /var/www/html; + } + } + server { listen 80; server_name dev.develop.sprinthub.ru; @@ -11,15 +23,6 @@ http { } } - server { - listen 80; - server_name telegram.develop.sprinthub.ru; - - location / { - proxy_pass http://web.telegram.org/; - } - } - server { listen 80; server_name swarmpit.develop.sprinthub.ru;