No certificate for syslog?

[djmitche]

nginx on the syslog server is not starting:

fatal: [localhost]: FAILED! => {"changed": false, "msg": "nginx: [emerg] BIO_new_file("/usr/local/etc/nginx/certs/syslog.buildbot.net.crt") failed (SSL: error:02001002:system library:fopen:No such file or directory:fopen('/usr/local/etc/nginx/certs/syslog.buildbot.net.crt','r') error:2006D080:BIO routines:BIO_new_file:no such file)\nnginx: configuration file /usr/local/etc/nginx/nginx.conf test failed\nnginx: [emerg] BIO_new_file("/usr/local/etc/nginx/certs/syslog.buildbot.net.crt") failed (SSL: error:02001002:system library:fopen:No such file or directory:fopen('/usr/local/etc/nginx/certs/syslog.buildbot.net.crt','r') error:2006D080:BIO routines:BIO_new_file:no such file)\n/usr/local/etc/rc.d/nginx: WARNING: failed to start nginx\n"}

[djmitche]

Ah, it looks like letsencrypt should be doing this:

- name: Install the certificate
  command: |
             /root/.acme.sh/acme.sh --install-cert -d {{server_name}} \
             --key-file {{ nginx_cert_dir }}/{{server_name}}.key  \
             --fullchain-file {{ nginx_cert_dir }}/{{server_name}}.crt \
             --reloadcmd "service nginx reload"
  when: ssl

I'm probably not the best person to fix this, then. The files from the syslog jail (including this key/cert) are now available at vm1:/root/svc1-bak.tar, if that's useful.