mirror of
https://github.com/geerlingguy/ansible-role-certbot.git
synced 2025-04-19 17:01:37 +02:00
Fixes #37: Make renew command configurable.
This commit is contained in:
parent
f00a0ba181
commit
574c0843c8
@ -16,6 +16,7 @@ The variable `certbot_install_from_source` controls whether to install Certbot f
|
|||||||
certbot_auto_renew_user: "{{ ansible_user }}"
|
certbot_auto_renew_user: "{{ ansible_user }}"
|
||||||
certbot_auto_renew_hour: 3
|
certbot_auto_renew_hour: 3
|
||||||
certbot_auto_renew_minute: 30
|
certbot_auto_renew_minute: 30
|
||||||
|
certbot_auto_renew_options: "--quiet --no-self-upgrade"
|
||||||
|
|
||||||
By default, this role configures a cron job to run under the provided user account at the given hour and minute, every day. The defaults run `certbot renew` (or `certbot-auto renew`) via cron every day at 03:30:00 by the user you use in your Ansible playbook. It's preferred that you set a custom user/hour/minute so the renewal is during a low-traffic period and done by a non-root user account.
|
By default, this role configures a cron job to run under the provided user account at the given hour and minute, every day. The defaults run `certbot renew` (or `certbot-auto renew`) via cron every day at 03:30:00 by the user you use in your Ansible playbook. It's preferred that you set a custom user/hour/minute so the renewal is during a low-traffic period and done by a non-root user account.
|
||||||
|
|
||||||
|
@ -4,6 +4,7 @@ certbot_auto_renew: true
|
|||||||
certbot_auto_renew_user: "{{ ansible_user }}"
|
certbot_auto_renew_user: "{{ ansible_user }}"
|
||||||
certbot_auto_renew_hour: 3
|
certbot_auto_renew_hour: 3
|
||||||
certbot_auto_renew_minute: 30
|
certbot_auto_renew_minute: 30
|
||||||
|
certbot_auto_renew_options: "--quiet --no-self-upgrade"
|
||||||
|
|
||||||
# To install from source (on older OSes or if you need a specific or newer
|
# To install from source (on older OSes or if you need a specific or newer
|
||||||
# version of Certbot), set this variable to `yes` and configure other options.
|
# version of Certbot), set this variable to `yes` and configure other options.
|
||||||
|
@ -2,7 +2,7 @@
|
|||||||
- name: Add cron job for certbot renewal (if configured).
|
- name: Add cron job for certbot renewal (if configured).
|
||||||
cron:
|
cron:
|
||||||
name: Certbot automatic renewal.
|
name: Certbot automatic renewal.
|
||||||
job: "{{ certbot_script }} renew --quiet --no-self-upgrade"
|
job: "{{ certbot_script }} renew {{ certbot_auto_renew_options }}"
|
||||||
minute: "{{ certbot_auto_renew_minute }}"
|
minute: "{{ certbot_auto_renew_minute }}"
|
||||||
hour: "{{ certbot_auto_renew_hour }}"
|
hour: "{{ certbot_auto_renew_hour }}"
|
||||||
user: "{{ certbot_auto_renew_user }}"
|
user: "{{ certbot_auto_renew_user }}"
|
||||||
|
Loading…
x
Reference in New Issue
Block a user