tpiccioli
/
ansible-role-postgresql
forked from ISTI-ansible-roles/ansible-role-postgresql
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Always reload the service.

This commit is contained in:
Andrea Dell'Amico 2021-07-05 11:47:51 +02:00
parent c559b6b0f6
commit 8af951180e
Signed by untrusted user: adellam
GPG Key ID: 147ABE6CEB9E20FF
1 changed files with 8 additions and 12 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
templates/postgresql-letsencrypt-acme.sh.j2
View File

@ -13,23 +13,18 @@ RETVAL=
[ ! -d $LE_LOG_DIR ] && mkdir $LE_LOG_DIR
echo "$DATE" >> $LE_LOG_DIR/postgresql.log
if [ -f /etc/default/letsencrypt ] ; then
. /etc/default/letsencrypt
else
logger "acme-pg-hook: No letsencrypt default file"
fi
logger "acme-pg-hook: Check if the certificate has been renewed"
cmp ${LE_CERTS_DIR}/privkey ${POSTGRESQL_KEYFILE}
RETVAL=$?
if [ $RETVAL -eq 0 ] ; then
logger "acme-pg-hook: No new cerficate. Doing nothing"
exit 0
fi
logger "acme-pg-hook: No new cerficate."
echo "acme-pg-hook: No new cerficate." >> $LE_LOG_DIR/postgresql.log
else
logger "acme-pg-hook: Copying the key file"
echo "Copy the key file" >> $LE_LOG_DIR/postgresql.log
cp ${LE_CERTS_DIR}/privkey ${POSTGRESQL_KEYFILE}
/bin/cp -f ${LE_CERTS_DIR}/privkey ${POSTGRESQL_KEYFILE}
fi
chmod 440 ${POSTGRESQL_KEYFILE}
chown root ${POSTGRESQL_KEYFILE}
chgrp postgres ${POSTGRESQL_KEYFILE}
@ -41,6 +36,7 @@ if [ -x /bin/systemctl ] ; then
{% else %}
systemctl reload postgresql-{{ psql_version }} >> $LE_LOG_DIR/postgresql.log 2>&1
{% endif %}
echo "acme-pg-hook: Reload the postgresql service" >> $LE_LOG_DIR/postgresql.log
else
logger "acme-pg-hook: Restart the postgresql service after a certificate renewal"
echo "Restart the postgresql service" >> $LE_LOG_DIR/postgresql.log
@ -48,7 +44,7 @@ else
fi
logger "acme-pg-hook: Done"
echo "Done." >> $LE_LOG_DIR/postgresql.log
echo "acme-pg-hook: Done." >> $LE_LOG_DIR/postgresql.log
exit 0