FIX: Don't force a cert issue everytime.
authorGuo Xiang Tan <tgx_world@hotmail.com>
Mon, 29 Aug 2016 21:17:46 +0000 (05:17 +0800)
committerGuo Xiang Tan <tgx_world@hotmail.com>
Mon, 29 Aug 2016 21:18:06 +0000 (05:18 +0800)
templates/web.letsencrypt.ssl.template.yml

index 3a85554930af37ac4c80a93766b84820a2f1a35b..a3059398b0e5b660482ff7f61b166c4ce2ba11cc 100644 (file)
@@ -55,7 +55,7 @@ hooks:
           #!/bin/bash
           /usr/sbin/nginx -c /etc/nginx/letsencrypt.conf
 
-          LE_WORKING_DIR="${LETSENCRYPT_DIR}" $$ENV_LETSENCRYPT_DIR/acme.sh --issue -d $$ENV_DISCOURSE_HOSTNAME -k 4096 -w /var/www/discourse/public --force
+          LE_WORKING_DIR="${LETSENCRYPT_DIR}" $$ENV_LETSENCRYPT_DIR/acme.sh --issue -d $$ENV_DISCOURSE_HOSTNAME -k 4096 -w /var/www/discourse/public
 
           if [ ! "$(cd $$ENV_LETSENCRYPT_DIR/$$ENV_DISCOURSE_HOSTNAME && openssl verify -CAfile ca.cer fullchain.cer | grep "OK")" ]; then
             # Try to issue the cert again if something goes wrong