services: Adjust lego timeouts/resolvers

Author: the-maldridge

services/nomad/infrastructure/lego.nomad

@@ -18,13 +18,13 @@ job "lego" {
       }
 
       config {
-        image = "ghcr.io/void-linux/infra-lego:v20210923RC04"
+        image = "ghcr.io/void-linux/infra-lego:v20211216RC02"
       }
 
       env {
         VAULT_ADDR="http://active.vault.service.consul:8200"
         ACTION="renew"
-        DO_PROPAGATION_TIMEOUT="10m"
+        DO_PROPAGATION_TIMEOUT="600"
       }
 
       template {

services/pkg/lego/lego.sh

@@ -2,7 +2,7 @@
 
 : "${ACTION:=renew}"
 : "${SERVER:=https://acme-v02.api.letsencrypt.org/directory}"
-: "${DO_PROPAGATION_TIMEOUT=15m}"
+: "${DO_PROPAGATION_TIMEOUT=900}"
 
 export DO_PROPAGATION_TIMEOUT
 
@@ -25,14 +25,12 @@ mkdir -p secret/lego/data
 handle_path secret/lego/data
 cp -r secret/lego/data pre-run
 
-
-# Need to dynamically choose whether to run or renew here.  Plausibly
-# easier to just run it once and then change the arguments.
 lego \
     --accept-tos \
     --email maldridge@voidlinux.org \
     --path secret/lego/data \
     --dns digitalocean \
+    --dns.resolvers 8.8.8.8:53 \
     --domains '*.voidlinux.org' \
     --domains '*.s.voidlinux.org' \
     --server $SERVER \