diff --git a/defaults/main.yml b/defaults/main.yml index 9448de9..dd9d815 100644 --- a/defaults/main.yml +++ b/defaults/main.yml @@ -5,6 +5,7 @@ certbot_auto_renew_user: "{{ ansible_user | default(lookup('env', 'USER')) }}" certbot_auto_renew_hour: "3" certbot_auto_renew_minute: "30" certbot_auto_renew_options: "--quiet --no-self-upgrade" + certbot_testmode: false certbot_hsts: false @@ -15,14 +16,18 @@ certbot_create_method: standalone certbot_admin_email: email@example.com certbot_certs: [] # - email: janedoe@example.com +# webroot: "/var/www/html/" # domains: # - example1.com # - example2.com # - domains: # - example3.com + certbot_create_command: >- {{ certbot_script }} certonly --standalone --noninteractive --agree-tos - --{{ certbot_create_method }} {{ certbot_webroot_arg if certbot_create_method == 'webroot' else '' }} {{ '--hsts' if certbot_hsts else '' }} + --{{ certbot_create_method }} {{ `-w ` if certbot_create_method == 'webroot' else '' }} + {{ cert_item.webroot if certbot_create_method == 'webroot' else '' }} + {{ '--hsts' if certbot_hsts else '' }} {{ '--test-cert' if certbot_testmode else '' }} --email {{ cert_item.email | default(certbot_admin_email) }} -d {{ cert_item.domains | join(',') }} @@ -49,7 +54,3 @@ certbot_keep_updated: true # Where to put Certbot when installing from source. certbot_dir: /opt/certbot -# Where the web root is -certbot_webroot: "/var/www/html" -certbot_webroot_arg: "-w {{ certbot_webroot }}" -