regen certificate in lemur

debian/compat

@@ -1 +0,0 @@
-12

debian/control

@@ -1,19 +0,0 @@
-Source: eole-lemur
-Section: admin
-Priority: extra
-Maintainer: Cadoles <contact@cadoles.com>
-Build-depends: debhelper (>=11)
-Standards-Version: 3.9.4
-Homepage: https://forge.cadoles.com/Infra/lemur
-
-Package: eole-lemur
-Architecture: any
-Depends: ${misc:Depends},
-	lemur,
-	lemur-static,
-	eole-postgresql,
-# for PIP
-	python3-pip,
-	gcc,
-	python3-dev
-Description: Lemur - eolisation

debian/copyright

@@ -1,10 +0,0 @@
-Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
-Upstream-Name: lemur
-Upstream-Contact: Cadoles <contact@cadoles.com>
-Source: https://forge.cadoles.com/Infra/lemur
-
-Files: *
-Copyright: Lemur
-License: Apache-2.0 License 
-
-License: Apache-2.0 License 

debian/eole-lemur.install

@@ -1,5 +0,0 @@
-dicos usr/share/eole/creole/
-tmpl/* usr/share/eole/creole/distrib/
-posttemplate/* usr/share/eole/posttemplate/
-funcs/* usr/share/creole/funcs
-db/* /usr/share/eole/db/lemur/gen/

debian/eole-lemur.postinst

@@ -1,12 +0,0 @@
-#!/bin/sh
-
-set -e
-
-if [ "$1" = configure ]; then
-    # Make sure the administrative user exists
-    if ! getent passwd lemur > /dev/null; then
-        adduser --system --home /usr/share/lemur --no-create-home --group --gecos "User for lemur" lemur --quiet
-    fi
-fi
-
-exit 0

debian/lemur.service

@@ -1 +0,0 @@
-../lemur.service

debian/rules

@@ -1,11 +0,0 @@
-#!/usr/bin/make -f
-# -*- makefile -*-
-
-# Uncomment this to turn on verbose mode.
-#export DH_VERBOSE=1
-
-%:
-	dh $@
-
-override_dh_installsystemd:
-	dh_installsystemd --name=lemur --no-enable --no-start --no-stop-on-upgrade

debian/source/format

@@ -1 +0,0 @@
-3.0 (quilt)

lemur_cron.service

@@ -0,0 +1,12 @@
+[Unit]
+Description=Lemur
+After=lemur.service
+
+[Service]
+Environment="LEMUR_CONF=/etc/lemur/lemur.conf.py"
+ExecStart=/usr/bin/lemur certificate reissue --commit
+User=lemur
+Group=lemur
+
+[Install]
+WantedBy=basic.target

lemur_cron.timer

@@ -0,0 +1,9 @@
+[Unit]
+Description=Crontab for Lemur
+
+[Timer]
+OnCalendar=daily
+Unit=lemur_cron.service
+
+[Install]
+WantedBy=timers.target

posttemplate/03-lemur

@@ -18,4 +18,6 @@ psql -Upostgres -c "grant all on all functions in schema public to lemur" lemur
 su - lemur -s /bin/bash -c "lemur --config=/etc/lemur/lemur.conf.py init --password $(CreoleGet lemur_admin_password)"
 systemctl stop postgresql.service
 
+systemctl enable --now lemur_cron.timer
+
 exit 0

tmpl/lemur.conf.py

@@ -26,6 +26,7 @@ LEMUR_ALLOWED_DOMAINS = []
 
 LEMUR_EMAIL = '%%lemur_admin_email'
 LEMUR_SECURITY_TEAM_EMAIL = []
+LEMUR_EMAIL_SENDER = 'smtp'
 
 # Certificate Defaults
 

tmpl/lemur.yml

@@ -16,3 +16,7 @@ sqlscripts:
   - /usr/share/eole/db/lemur/gen/lemur.sql
 pwd_files:
   - {'file': '/etc/lemur/lemur.conf.py', 'pattern': "SQLALCHEMY_DATABASE_PASSWORD = '"}
+%set %%var = %%getVar('risotto_main_dbname', None)
+%if not %%is_empty(%%var)
+  - {'file': '/etc/risotto/risotto.conf', 'pattern': "LEMUR_DB_PASSWORD='"}
+%end if