From f19d6f6a723362f8a56e731b101cd41b50e7e732 Mon Sep 17 00:00:00 2001 From: Kevin Midboe Date: Fri, 7 Aug 2026 17:27:51 +0200 Subject: [PATCH] configure dns resolvers for lego --- roles/elasticsearch/tasks/tls.yml | 1 + roles/elasticsearch/templates/lego-renew.service.j2 | 1 + 2 files changed, 2 insertions(+) diff --git a/roles/elasticsearch/tasks/tls.yml b/roles/elasticsearch/tasks/tls.yml index 5412ff8..b998829 100644 --- a/roles/elasticsearch/tasks/tls.yml +++ b/roles/elasticsearch/tasks/tls.yml @@ -113,6 +113,7 @@ --server "{{ elk_tls_acme_server }}" \ --domains "{{ elk_tls_domain }}" \ --dns cloudflare \ + --dns.resolvers "1.1.1.1:53,8.8.8.8:53" \ --path "{{ elk_lego_path }}" \ run args: diff --git a/roles/elasticsearch/templates/lego-renew.service.j2 b/roles/elasticsearch/templates/lego-renew.service.j2 index 3d9d2e5..12647c9 100644 --- a/roles/elasticsearch/templates/lego-renew.service.j2 +++ b/roles/elasticsearch/templates/lego-renew.service.j2 @@ -14,6 +14,7 @@ ExecStart={{ elk_lego_install_dir }}/lego \ --server "{{ elk_tls_acme_server }}" \ --domains "{{ elk_tls_domain }}" \ --dns cloudflare \ + --dns.resolvers "1.1.1.1:53,8.8.8.8:53" \ --path "{{ elk_lego_path }}" \ --run-hook "/usr/bin/docker compose -f {{ elk_base_dir }}/docker-compose.yml -p {{ elk_compose_project_name }} restart elasticsearch kibana logstash" \ renew --days {{ elk_tls_renew_days }}