From 06297324498bdac93571320b44061cdf76e7ee20 Mon Sep 17 00:00:00 2001 From: Muaz Ahmad Date: Sun, 3 Sep 2023 22:39:21 +0500 Subject: [PATCH] baseline cloud-init script + ddns+acme automation files; populate files with envsubst --- basic_configs/debian-hetzner-init | 47 +++++++++++++++++++++++++++++++ 1 file changed, 47 insertions(+) create mode 100644 basic_configs/debian-hetzner-init diff --git a/basic_configs/debian-hetzner-init b/basic_configs/debian-hetzner-init new file mode 100644 index 0000000..d3c59e7 --- /dev/null +++ b/basic_configs/debian-hetzner-init @@ -0,0 +1,47 @@ +#cloud-config +# vim: syntax=yaml +packages: + - ufw + - nginx + - lego + - wireguard + - python-requests + +package_update: true +package_upgrade: true + +write-files: + - encoding: b64 + content: ${WRAPPER_SCRIPT} + owner: root:root + path: /usr/local/bin/ddns-acme-porkbun + permissions: '0744' + - encoding: b64 + content: ${DDNS_SCRIPT} + owner: root:root + path: /usr/local/bin/ddns-porkbun + permissions: '0744' + - content: | + [Unit] + Description=Renew acme certs and DDNS update + [Service] + Type=oneshot + ExecStart=/usr/local/bin/ddns-acme-porkbun renew + owner: root:root + path: /etc/systemd/system/ddns-acme-porkbun.service + permissions: '0644' + - content: | + [Unit] + Description=Renew certs and dns records periodically + [Timer] + OnCalendar=*-01,03,05,07,09,11-01 02:00:00 + RandomizedDelaySec=12h + Persistent=true + [Install] + WantedBy=timers.target + owner: root:root + path: /usr/local/bin/ddns-acme-porkbun.timer + permissions: '0644' + +runcmd: + - reboot