From e1a16792c1f32c2ed9d5144ecda160ac6054c980 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Hugo=20H=C3=B6rnquist?= <hugo@lysator.liu.se>
Date: Fri, 2 Apr 2021 22:09:38 +0200
Subject: [PATCH] Change to external cert chain.

---
 files/znc.conf     |  6 +++---
 manifests/setup.pp | 12 ++++++------
 2 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/files/znc.conf b/files/znc.conf
index 3ea43b7..5b9ff9c 100644
--- a/files/znc.conf
+++ b/files/znc.conf
@@ -2,9 +2,9 @@ Version = 1.7.5
 
 ConfigWriteDelay = 0
 ProtectWebSessions = true
-SSLCertFile = /var/lib/znc/znc.pem
-SSLDHParamFile = /var/lib/znc/znc.pem
-SSLKeyFile = /var/lib/znc/znc.pem
+SSLCertFile = /var/lib/znc/fullchain.pem
+SSLDHParamFile = /var/lib/znc/fullchain.pem
+SSLKeyFile = /var/lib/znc/privkey.pem
 
 <Listener irclistener-ssl>
 	Port = 6697
diff --git a/manifests/setup.pp b/manifests/setup.pp
index 17715e0..b2becce 100644
--- a/manifests/setup.pp
+++ b/manifests/setup.pp
@@ -76,12 +76,12 @@ class irc_bouncer::setup {
     args => ['saslauthd'],
   }
 
-  exec { 'znc make pem':
-    command => 'znc --datadir=/var/lib/znc --makepem',
-    path    => '/usr/bin:/bin',
-    user    => 'znc',
-    onlyif  => 'test ! -f /var/lib/znc/znc.pem',
-  }
+  # exec { 'znc make pem':
+  #   command => 'znc --datadir=/var/lib/znc --makepem',
+  #   path    => '/usr/bin:/bin',
+  #   user    => 'znc',
+  #   onlyif  => 'test ! -f /var/lib/znc/znc.pem',
+  # }
 
   file { '/var/lib/znc/moddata/cyrusauth/.registry':
     ensure  => file,
-- 
GitLab