55 Commits

Author SHA1 Message Date
fliespl
48941fe2a0
handle certbot expand in webroot 2024-09-20 22:46:05 +02:00
fliespl
6230e82ba9
handle expand in standalone 2024-09-20 22:45:47 +02:00
Jeff Geerling
78f4cb5ad5 Use CRB not powertools on Alma and Rocky. 2024-07-30 23:24:23 -05:00
Brett Costabile
1b04270982 fixed lint 2023-05-09 10:14:27 -04:00
Jeff Geerling
3f133ad7ab Remove deprecated warn arg from command and shell module invocations. 2022-11-26 22:51:08 -06:00
Tobias Huste
1fc3a76d34 Fix snap symlink task failing in initial dry-run
Due to the certbot package not being really installed on the initial
dry-run the symlink generation fails. The corresponding will be ignored
in check mode.
2021-11-24 11:11:03 +01:00
Simon Spannagel
a9a3ef77a3 Remove old deploy hook method superseded by pre-hook and post-hook methods 2021-11-22 07:27:48 +01:00
Simon Spannagel
7a7c1f8b06 Fix linter suggestions 2021-11-22 07:25:31 +01:00
Romain Porte
40c4c1b433 webroot: install hook before creating certificates
The command that will create the certificates need the hook script
ansible.sh to exist before it is run, elsewise an error will occur in
case of first run on a new host.

(cherry picked from commit 2346cd52a262bf2fa89419f29abba0e8ea95cdb7)
2021-11-22 07:25:31 +01:00
Romain Porte
bd58f8e72c optimize renewal-hook creation: run it only once and not per domain 2021-11-22 07:25:31 +01:00
Simon Spannagel
123facdbab Ensure deploy hook directory exists before using 2021-11-22 07:25:31 +01:00
Simon Spannagel
e1013946c5 Webroot: allow to set default webroot path, overwritten by per-cert path 2021-11-22 07:25:31 +01:00
Simon Spannagel
50d8921ec2 Create webroot directory if it doesn't exist 2021-11-22 07:25:31 +01:00
Simon Spannagel
e669ab0ac4 Replace shell with command module 2021-11-22 07:25:31 +01:00
Simon Spannagel
ca46eab49f Fix linting issues 2021-11-22 07:25:29 +01:00
Ryan Faircloth
c7e5eec8cc Update create-cert-webroot.yml
Removed debug logging of var as it could have protected information
2021-11-22 07:22:25 +01:00
Ryan Faircloth
23f593aaaf Fixes #39 adding new script for webroot
Fixes #41 support deployhook (webroot only)
Fixes #41 support for test CA
2021-11-22 07:22:15 +01:00
Jeff Geerling
027af9b3b3
Merge pull request #152 from stackbuilders/fix_install_with_snap_debian
[#151] Skip "Enable classic snap support" on Debian
2021-10-25 10:20:54 -05:00
Jeff Geerling
7317dbcabe Fix lint warnings. 2021-10-25 10:19:58 -05:00
Jeff Geerling
aaf3dbd40a
Merge pull request #159 from jivanpal/snapd-start
Ensure snapd is started immediately
2021-10-25 10:04:22 -05:00
Jivan Pal
6647174286 Add conditional to handle old name of PowerTools repo for CentOS 8.2.2004 and earlier 2021-09-18 01:40:09 +01:00
Jivan Pal
3f8533436b Ensure snapd is started immediately 2021-09-17 21:44:35 +01:00
Jeff Geerling
7ad49929dd PR #80 touch-up for cosmetic purposes. 2021-05-28 14:49:49 -05:00
Jeff Geerling
6bb2ed6436
Merge pull request #80 from wvh-github/feature/create_pre_and_post_hook
create pre and post hooks
2021-05-28 14:47:32 -05:00
Jeff Geerling
515e8af98b
Update tasks/create-cert-standalone.yml 2021-05-28 14:39:45 -05:00
Jeff Geerling
b17976752c
Update tasks/create-cert-standalone.yml 2021-05-28 14:39:41 -05:00
Sebastián Estrella
02e1e4e148 [#151] Skip "Enable classic snap support" on Debian 2021-04-28 22:05:31 -05:00
Jeff Geerling
e34a21f0eb Set certbot_script variable for snap-based install. 2021-02-21 09:03:18 -06:00
Jeff Geerling
4f22d025cd Slight tweak, but it still won't work. 2021-01-19 12:07:46 -06:00
Jeff Geerling
ea88bfa03c Attempt to get snap based install working correctly. 2021-01-19 11:56:58 -06:00
Jeff Geerling
56ba6ad847 Fix syntax error with file module usage. 2021-01-19 11:02:58 -06:00
Jeff Geerling
0ba7078e8c Issue #134: Snap install method. 2021-01-19 10:54:42 -06:00
Jeff Geerling
9090d7d431
Merge pull request #127 from wzzrd/patch-1
Only enable PowerTools on CentOS
2020-12-27 00:05:59 -06:00
GuillaumeRemyCSI
51ff0b14a3
Fixed issue with PowerTools DNF module
PowerTools has been renamed to powertools on CentOS 8
2020-12-18 15:38:56 +01:00
Maxim Burgerhout
a9609e1da6
Only enable PowerTools on CentOS
The PowerTools repo exists only on CentOS, but the current selector ansible_os_family == 'RedHat' also evaluates to true on Fedora and RHEL, making this role fail.

This patch switches the when statement to only evaluate to true if really running on CentOS, which I think was the intention
2020-09-30 08:52:43 +02:00
Jeff Geerling
09c8986636 Issue #107: PowerTools required to install via package on CentOS 8. 2020-04-20 16:56:03 -05:00
Wout van Heeswijk
8164566c4f
create pre and post hooks
* Move 'stop' services to pre-hook and post-hook. This way they will also be stopped and started when renewing.

- remove service stop/start tasks
- add pre-hook/post-hook templates
- add pre-hook/pos-hook template tasks
- create missing directories at first run
- run pre and post hook during first manual run
2019-04-19 10:30:48 +02:00
Jeff Geerling
00dc226101 Fixes E305 linting error: use shell only when required. 2018-12-06 16:15:09 -06:00
Jeff Geerling
d8beca4c1a
Merge pull request #60 from michaelpporter/master
Supports check of wildcard certs
2018-09-27 21:59:28 -05:00
Jeff Geerling
5da6dd18cd Fix Ansible lint issues. 2018-09-26 21:32:28 -05:00
Michael Porter
ce4dacf632
Supports check of wildcard certs
Adds support to check for wildcard certs to not re-make them on subsequent runs
2018-09-23 14:58:52 -05:00
Jeff Geerling
d3f98e4258 Fixes #12: Document how to generate certs automatically using certbot --standalone. 2017-12-11 22:17:25 -06:00
Jeff Geerling
5f7c9e046c Issue #12: Fix standalone cert generation, add full build-test-teardown playbook. 2017-12-10 22:47:54 -06:00
Jeff Geerling
7651f0ac0b Issue #12: Add basic standalone certbot cert generation. 2017-12-06 22:48:30 -06:00
Jeff Geerling
574c0843c8 Fixes #37: Make renew command configurable. 2017-10-31 10:09:41 -05:00
exploide
1ca3e00b46 include distribution specific vars from files 2017-04-01 14:23:08 +02:00
Oskar Schöldström
e82a68e331 Support Ubuntu 16.04 out of the box 2017-03-25 18:15:43 +01:00
exploide
afa993333f renamed certbot_from_git variable to certbot_install_from_source and fixed some wording 2017-03-19 14:38:07 +01:00
exploide
f3a260e94e added possibility to install certbot from package management
- introduces a variable certbot_from_git
- adds install from package tasks
- makes a variable called certbot_script available (to handle certbot vs certbot-auto naming)
- fixes #18
2017-02-24 10:10:20 +01:00
exploide
35ceee9f1b restructured tasks such that subtask files are included
this is a preparation for installing certbot from package management
additionally, it might be useful when further tasks are added, e.g. for initial certificate retrieval
2017-02-23 20:00:42 +01:00