switching to volumes for ssl certs

Nginx.kube.yaml

@@ -51,10 +51,10 @@ spec:
           mountPath: /etc/nginx/geoip.d/
         - name: blacklisted-memory-volume
           mountPath: /etc/nginx/blacklisted.memory.d/
+
         - name: reverse-proxy-ssl
           mountPath: /etc/nginx/ssl/
-        - name: reverse-proxy-ssl-root
-          mountPath: /etc/nginx/sslroot/
+
         - mountPath: /etc/nginx/
           name: nginx-configfile
         - name: proxy-cache-path-volume
@@ -108,10 +108,10 @@ spec:
       - name: reverse-proxy-log
         persistentVolumeClaim:
           claimName: reverse-proxy-log
+#      - name: reverse-proxy-ssl
+#        hostPath:
+#           path: /opt/kubernetes/Reverse_proxy_Nginx/certbot/conf/
       - name: reverse-proxy-ssl
-        hostPath:
-           path: /opt/kubernetes/Reverse_proxy_Nginx/certbot/conf/
-      - name: reverse-proxy-ssl-root
         persistentVolumeClaim:
           claimName: reverse-proxy-ssl
       - name: nginx-configfile

nginx-config.configmap.yaml

@@ -22,8 +22,8 @@ data:
     blocked_fmt '$http_host \\t $remote_addr - [$time_local] '\n\t\t'Blocked Country:
     $geoip2_data_country_iso_code '\n                '\"$request\" $status';\n\n\tlog_format
     deny_style 'deny $remote_addr; #$geoip2_data_city_name $geoip2_data_country_name';\n\n\tserver
-    {\n\tlisten 80;\n        listen 443 default ssl;\n\tssl_certificate /etc/nginx/ssl/live/default.tryton.geeraert.eu/fullchain.pem;
-    # managed by$\n        ssl_certificate_key /etc/nginx/ssl/live/default.tryton.geeraert.eu/privkey.pem;
+    {\n\tlisten 80;\n        listen 443 default ssl;\n\tssl_certificate /etc/nginx/ssl/live/geeraert.eu/fullchain.pem;
+    # managed by$\n        ssl_certificate_key /etc/nginx/ssl/live/geeraert.eu/privkey.pem;
     # managed $\n        location / {\n            proxy_pass         http://1.1.1.1;\n
     \           proxy_redirect     off;\n            proxy_set_header   Host $host;\n
     \           proxy_set_header   X-Real-IP $remote_addr;\n            proxy_set_header

nginx.conf

@@ -41,8 +41,8 @@ http {
 	server {
 	listen 80;
         listen 443 default ssl;
-	ssl_certificate /etc/nginx/ssl/live/default.tryton.geeraert.eu/fullchain.pem; # managed by$
-        ssl_certificate_key /etc/nginx/ssl/live/default.tryton.geeraert.eu/privkey.pem; # managed $
+	ssl_certificate /etc/nginx/ssl/live/geeraert.eu/fullchain.pem; # managed by$
+        ssl_certificate_key /etc/nginx/ssl/live/geeraert.eu/privkey.pem; # managed $
         location / {
             proxy_pass         http://1.1.1.1;
             proxy_redirect     off;

terraform/nginx_config.tftpl

@@ -163,8 +163,8 @@ server {
         listen 80;
         %{~ endif ~}
 
-        ssl_certificate /etc/nginx/sslroot/live/geeraert.eu/fullchain.pem;
-        ssl_certificate_key /etc/nginx/sslroot/live/geeraert.eu/privkey.pem;
+        ssl_certificate /etc/nginx/ssl/live/geeraert.eu/fullchain.pem;
+        ssl_certificate_key /etc/nginx/ssl/live/geeraert.eu/privkey.pem;