add initial session ticket key synchronization

This commit is contained in:
Daniel Micay 2025-10-30 14:12:24 -04:00
parent f9430a1aeb
commit 9fde84c877
7 changed files with 121 additions and 1 deletions

View file

@ -10,7 +10,9 @@ for host in ${hosts_primary[@]}; do
echo $host
echo
rsync --chmod=F755 certbot-replicate $remote:/usr/local/bin/
rsync --chmod=F755 certbot-replicate session-ticket-keys-sync $remote:/usr/local/bin/
rsync etc/systemd/system/certbot-renew.service.d/replicate.conf $remote:/etc/systemd/system/certbot-renew.service.d/
rsync etc/systemd/system/session-ticket-keys-sync.{service,timer} $remote:/etc/systemd/system/
ssh $remote systemctl daemon-reload
ssh $remote systemctl enable --now session-ticket-keys-sync.timer
done