CroneKorkN
7265c4aab1
On Debian 13 trixie `dnsutils` is a transitional package replaced by `bind9-dnsutils`. Apt installs bind9-dnsutils when you ask for dnsutils, but `dpkg -s dnsutils` returns 1 because no real package by that name exists — bw's pkg_apt status check then flags the item as failed every apply. Switching the dependency to the real package name resolves the loop. The bundle just needs `nsupdate` (provided by bind9-dnsutils) for the DNS-01 challenge hook.
24 lines
599 B
Python
24 lines
599 B
Python
defaults = {
|
|
'apt': {
|
|
'packages': {
|
|
'dehydrated': {},
|
|
'bind9-dnsutils': {},
|
|
},
|
|
},
|
|
'letsencrypt': {
|
|
'domains': {
|
|
# 'example.com': {
|
|
# 'aliases': {'www.example.com'},
|
|
# 'reload': {'nginx'},
|
|
# 'owner': 'www-data',
|
|
# 'location': '/opt/app/certs',
|
|
# },
|
|
},
|
|
},
|
|
'systemd-timers': {
|
|
'letsencrypt': {
|
|
'command': '/usr/bin/dehydrated --cron --accept-terms --challenge dns-01',
|
|
'when': 'daily',
|
|
},
|
|
},
|
|
}
|