Add cert rotation and systemd service

Makefile

@@ -17,7 +17,9 @@ build: FORCE
 		darklimericks.jar -C -m com.darklimericks.server.core
 
 push: FORCE
-	rsync -aP web/darklimericks.jar root@165.227.16.47:/root/darklimericks/web/
+	rsync -aP web/darklimericks.jar root@darklimericks.com:/root/darklimericks/web/
+	rsync -P rotate-cert.sh root@darklimericks.com:/root/darklimericks/
+	rsync -P darklimericks.service root@darklimericks.com:/etc/systemd/system/
 
 certs:
 	ssh root@darklimericks.com \

load-balancer/run.sh

@@ -1,4 +1,5 @@
 #!/bin/sh
+set -eoux
 
 HOST_IP=`ip -4 addr show scope global dev docker0 | grep inet | awk '{print \$2}' | cut -d / -f 1`
 FULLCHAIN_PEM="${FULLCHAIN_PEM:-/etc/letsencrypt/live/darklimericks.com/fullchain.pem}"

rotate-cert.sh

@@ -0,0 +1,7 @@
+#!/usr/bin/env sh
+
+cd darklimericks/load-balancer
+docker stop haproxy
+docker rm haproxy
+cat /etc/letsencrypt/live/darklimericks.com/privkey.pem >> /etc/letsencrypt/live/darklimericks.com/fullchain.pem
+./run.sh

util/ssl.org

@@ -1,7 +1,5 @@
 #+TITLE: Ssl
 
-
-
 #+begin_src sh
 certbot certonly -d darklimericks.com --webroot --webroot-path /root/darklimericks/web/resources/public --keep
 cat /etc/letsencrypt/archive/darklimericks.com/privkey.pem >> /etc/letsencrypt/archive/darklimericks.com/fullchain.pem

web/darklimericks.service

@@ -0,0 +1,10 @@
+[Unit]
+Description=Run DarkLimericks web server
+
+[Service]
+WorkingDirectory=/root/darklimericks/web
+ExecStart=/usr/bin/java -Xmx3072m -jar darklimericks.jar
+Restart=on-failure
+
+[Install]
+WantedBy=multi-user.target