codefordurham / food-inspector

Our health rating restaurant application
http://ncfoodinspector.com/
BSD 3-Clause "New" or "Revised" License
16 stars 11 forks source link

Move SSL Cert from StartCom #174

Closed JonathanFrederick closed 7 years ago

JonathanFrederick commented 7 years ago

It seems we should move our ssl certificate from StartCom to Let's Encrypt to get Chrome to trust the site.

JonathanFrederick commented 7 years ago

@vrocha I'm doing my best to wrap my head around this. I'm guessing there's changes to be made to our config and I can't just run these Certbot instructions. Can you help point me in the right direction?

vrocha commented 7 years ago

@JonathanFrederick This is rather difficult to explain but basically we need to add this file (or a version of it) to our repo inside this directory. After that, follow the instructions here https://caktus.github.io/developer-documentation/margarita/states.html#project-web-balancer.

Getting the balancer.sls file to work with our current version of salt states will be tricky.

specious commented 7 years ago

@vrocha, I want to help fix this, but I don't grok the salt stack at all.

vrocha commented 7 years ago

@specious If I am not mistaken, I believe, the configuration version that we are using support this https://caktus.github.io/developer-documentation/margarita/states.html#project-web-balancer which means you only need to add this variable to your pillar file:

letsencrypt: true (here https://github.com/codefordurham/food-inspector/blob/develop/conf/pillar/production.sls)

specious commented 7 years ago

I'm getting up to speed on the salt stack so I can grok it - Mike Place - Introduction to SaltStack