Hardcode let'sencrypt path to avoid problems with docker volumes and …

…renewal
SpaceCowMedia · Mar 2, 2023 · 28283f2 · 28283f2
1 parent f24c1a5
commit 28283f2
Show file tree

Hide file tree

Showing 3 changed files with 3 additions and 4 deletions.
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -77,7 +77,6 @@ jobs:
       SECRET_KEY: ${{ secrets.ENV_SECRET_KEY }}
       DB_USER: ${{ secrets.ENV_DB_USER }}
       DB_PASSWORD: ${{ secrets.ENV_DB_PASSWORD }}
-      SSL_CERTIFICATE_LOCATION: ${{ secrets.ENV_SSL_CERTIFICATE_LOCATION }}
       AWS_S3_ACCESS_KEY_ID: ${{ secrets.ENV_AWS_S3_ACCESS_KEY_ID }}
       AWS_S3_SECRET_ACCESS_KEY: ${{ secrets.ENV_AWS_S3_SECRET_ACCESS_KEY }}
       AWS_S3_REGION: ${{ secrets.ENV_AWS_S3_REGION }}

diff --git a/backend/docker-compose.ssl.yml b/backend/docker-compose.ssl.yml
@@ -9,6 +9,6 @@ services:
       target: ssl
     image: spellbook-nginx-ssl
     volumes:
-      - ${SSL_CERTIFICATE_LOCATION:?}:/etc/nginx/ssl/:ro
+      - /etc/letsencrypt/:/etc/letsencrypt/:ro
     ports:
       - 443:443
diff --git a/backend/nginx/ssl.conf b/backend/nginx/ssl.conf
@@ -1,8 +1,8 @@
 listen              443 ssl http2;
 listen              [::]:443 ssl http2;
 server_name         backend.commanderspellbook.com;
-ssl_certificate     /etc/nginx/ssl/fullchain.pem;
-ssl_certificate_key /etc/nginx/ssl/privkey.pem;
+ssl_certificate     /etc/letsencrypt/live/backend.commanderspellbook.com/fullchain.pem;
+ssl_certificate_key /etc/letsencrypt/live/backend.commanderspellbook.com/privkey.pem;
 
 if ($scheme = http) {
     return 301 https://$server_name$request_uri;