mirror of
https://github.com/chatmail/relay.git
synced 2026-05-13 09:24:43 +00:00
da3d726fb1
Adds a new tls_external_cert_and_key config option for chatmail servers that manage their own TLS certificates (e.g. via an external ACME client or a load balancer). A systemd path unit (tls-cert-reload.path) watches the certificate file via inotify and automatically reloads dovecot and nginx when it changes. Postfix reads certs per TLS handshake so needs no reload. Also extracts openssl_selfsigned_args() so cert generation parameters are shared between SelfSignedTlsDeployer and the e2e test.
38 lines
947 B
YAML
38 lines
947 B
YAML
name: test tls_external_cert_and_key on staging2.testrun.org
|
|
|
|
on:
|
|
workflow_run:
|
|
workflows:
|
|
- "deploy on staging2.testrun.org, and run tests"
|
|
types:
|
|
- completed
|
|
|
|
jobs:
|
|
test-tls-external:
|
|
name: test tls_external_cert_and_key
|
|
runs-on: ubuntu-latest
|
|
timeout-minutes: 30
|
|
concurrency: staging2.testrun.org
|
|
environment:
|
|
name: staging2.testrun.org
|
|
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
|
|
- name: prepare SSH
|
|
run: |
|
|
mkdir -p ~/.ssh
|
|
echo "${{ secrets.STAGING_SSH_KEY }}" >> ~/.ssh/id_ed25519
|
|
chmod 600 ~/.ssh/id_ed25519
|
|
ssh-keyscan staging2.testrun.org >> ~/.ssh/known_hosts 2>/dev/null
|
|
|
|
- run: scripts/initenv.sh
|
|
|
|
- name: append venv/bin to PATH
|
|
run: echo venv/bin >>$GITHUB_PATH
|
|
|
|
- name: run tls_external e2e test
|
|
run: |
|
|
python -m cmdeploy.tests.setup_tls_external \
|
|
staging2.testrun.org
|