mirror of
https://github.com/geerlingguy/ansible-role-certbot.git
synced 2026-08-27 01:51:27 +02:00
Adding Apache's plugin support
This plugin supports issuing/renewing certificates without needing to stop/start Apache's daemon. This change also adds a variable to allow override default letsencrypt config directory (/etc/letsencrypt).
This commit is contained in:
+12
-3
@@ -4,10 +4,12 @@ certbot_auto_renew: true
|
||||
certbot_auto_renew_user: "{{ ansible_user | default(lookup('env', 'USER')) }}"
|
||||
certbot_auto_renew_hour: 3
|
||||
certbot_auto_renew_minute: 30
|
||||
certbot_auto_renew_options: "--quiet --no-self-upgrade"
|
||||
certbot_auto_renew_options: "--config-dir {{ certbot_config_dir }}
|
||||
--{{ certbot_create_method }} --quiet --no-self-upgrade"
|
||||
|
||||
# Parameters used when creating new Certbot certs.
|
||||
certbot_create_if_missing: false
|
||||
# Supported methods: standalone and apache
|
||||
certbot_create_method: standalone
|
||||
certbot_admin_email: email@example.com
|
||||
certbot_certs: []
|
||||
@@ -18,8 +20,9 @@ certbot_certs: []
|
||||
# - domains:
|
||||
# - example3.com
|
||||
certbot_create_command: >-
|
||||
{{ certbot_script }} certonly --standalone --noninteractive --agree-tos
|
||||
--email {{ cert_item.email | default(certbot_admin_email) }}
|
||||
{{ certbot_script }} --config-dir {{ certbot_config_dir }}
|
||||
certonly --{{ certbot_create_method }} --noninteractive
|
||||
--agree-tos --email {{ cert_item.email | default(certbot_admin_email) }}
|
||||
-d {{ cert_item.domains | join(',') }}
|
||||
|
||||
certbot_create_standalone_stop_services:
|
||||
@@ -36,3 +39,9 @@ certbot_keep_updated: true
|
||||
|
||||
# Where to put Certbot when installing from source.
|
||||
certbot_dir: /opt/certbot
|
||||
|
||||
# Certbot extra Packages (To install additional packages like certbot-apache)
|
||||
certbot_extra_packages: ""
|
||||
|
||||
# Certbot config directory
|
||||
certbot_config_dir: /etc/letsencrypt
|
||||
|
||||
Reference in New Issue
Block a user