misc fixups to the ssl deployment

Signed-off-by: Mattia Rizzolo <mapreri@ubuntu.com>

roles/nginx/templates/reload-nginx

-#!/bin/bash
+#!/bin/sh
 #
 # {{ ansible_managed }}
 #
 
+set -eu
+
+echo "reloading nginx…"
 sudo service nginx reload

roles/nginx/templates/sites/default.conf

@@ -10,4 +10,6 @@ server {
         return 204 "This is {{ inventory_hostname }}. If you came here there is a misconfiguration somewhere. Please inform gruppo-sistemisti@liste.ubuntu-it.org about the issue.";
         add_header Content-Type text/plain;
     }
+
+    include /etc/nginx/snippets/dehydrated.conf;
 }

roles/postfix/templates/reload-postfix

+#!/bin/sh
 #
 # {{ ansible_managed }}
 #
 
+set -eu
+
 if [ "$1" = "$(hostname -f)" ]; then
+    echo "reloading postfix…"
     sudo service postfix reload
 fi

roles/ssl-keys/templates/letsencrypt/hooks.sh

@@ -5,6 +5,7 @@
 set -eu
 
 OP=$1
+shift
 
 _log () {
     echo " + ($OP) $*"
@@ -13,7 +14,7 @@ _log () {
 case "$OP" in
     deploy_cert)
         DOMAIN="$1"
-        run-parts --exit-on-error --arg="$DOMAIN" --report -- {{ ssl_home }}/hooks
+        run-parts --exit-on-error --arg="$DOMAIN" --verbose -- {{ ssl_home }}/hooks
         ;;
     *)
         ;;