Fix letsencrypt access to certbot for the mail-letsencrypt flavour

4 years ago · d32e73c5bc
parent 3ca81913fc
commit d32e73c5bc
2 changed files with 2 additions and 1 deletions
--- a/core/nginx/conf/nginx.conf
+++ b/core/nginx/conf/nginx.conf
@ -106,7 +106,7 @@ http {
      {% endif %}

      # If TLS is failing, prevent access to anything except certbot
-      {% if KUBERNETES_INGRESS != 'true' and TLS_ERROR and not TLS_FLAVOR == "mail" %}
+      {% if KUBERNETES_INGRESS != 'true' and TLS_ERROR and not (TLS_FLAVOR in [ 'mail-letsencrypt', 'mail' ]) %}
      location / {
        return 403;
      }
--- a/towncrier/newsfragments/1686.bugfix
+++ b/towncrier/newsfragments/1686.bugfix
@ -0,0 +1 @@
+Fix letsencrypt access to certbot for the mail-letsencrypt flavour
				`@ -0,0 +1 @@`
				`Fix letsencrypt access to certbot for the mail-letsencrypt flavour`