# - ip 37.202.1.232
infra::profile::cron::cronjobs:
+ gencrl:
+ user: nobody
+ command: '/usr/bin/curl -H "Authorization: basic cGtpYWRtaW46cHAjMjAxNCFvZHQtQmVybGlu" "https://odt-tinyca.pixelpark.net/phpki/ca/index.php?stage=gen_crl" > /dev/null 2>&1'
+ minute: 0
+ hour: 4
+ description: generate crl
fetchcrl:
user: root
- command: 'scp httpd@odt-tinyca:/www/htdocs/odt-tinyca.pixelpark.net/data/phpki-store/CA/crl/cacrl.pem /etc/pki/tls/certs/odt-cacrl.pem && systemctl reload httpd'
+ command: 'scp httpd@odt-tinyca:/www/htdocs/odt-tinyca.pixelpark.net/data/phpki-store/CA/crl/cacrl.pem /etc/apache2/ssl.crl/odt-cacrl.pem && systemctl reload apache2'
minute: 0
hour: 5
description: um 05:00 Uhr wird die Revocationlist vom User openemm geholt. somit muss der Webserver restarted werden