From 9162b6fc2e1bbb483e756de87552ccfe2181d595 Mon Sep 17 00:00:00 2001 From: Antonio Barbaro Date: Tue, 25 Feb 2020 20:39:33 +0100 Subject: [PATCH] check service exist and open port 80 --- tasks/create-cert-standalone.yml | 15 +++++++++++++-- 1 file changed, 13 insertions(+), 2 deletions(-) diff --git a/tasks/create-cert-standalone.yml b/tasks/create-cert-standalone.yml index 6f25b8a..fbb485d 100644 --- a/tasks/create-cert-standalone.yml +++ b/tasks/create-cert-standalone.yml @@ -4,11 +4,22 @@ path: /etc/letsencrypt/live/{{ cert_item.domains | first | replace('*.', '') }}/cert.pem register: letsencrypt_cert +- name: Populate service facts + service_facts: + +- name: firewall enable port 80 + firewalld: + port: 80/tcp + permanent: false + state: enabled + ignore_errors: yes + when: not letsencrypt_cert.stat.exists + - name: Stop services to allow certbot to generate a cert. service: name: "{{ item }}" state: stopped - when: not letsencrypt_cert.stat.exists + when: not letsencrypt_cert.stat.exists and item in services with_items: "{{ certbot_create_standalone_stop_services }}" - name: Generate new certificate if one doesn't exist. @@ -19,5 +30,5 @@ service: name: "{{ item }}" state: started - when: not letsencrypt_cert.stat.exists + when: not letsencrypt_cert.stat.exists and item in services with_items: "{{ certbot_create_standalone_stop_services }}"