49 Commits

Author SHA1 Message Date
Simon Spannagel
a9a3ef77a3 Remove old deploy hook method superseded by pre-hook and post-hook methods 2021-11-22 07:27:48 +01:00
Simon Spannagel
7a7c1f8b06 Fix linter suggestions 2021-11-22 07:25:31 +01:00
Romain Porte
40c4c1b433 webroot: install hook before creating certificates
The command that will create the certificates need the hook script
ansible.sh to exist before it is run, elsewise an error will occur in
case of first run on a new host.

(cherry picked from commit 2346cd52a262bf2fa89419f29abba0e8ea95cdb7)
2021-11-22 07:25:31 +01:00
Romain Porte
bd58f8e72c optimize renewal-hook creation: run it only once and not per domain 2021-11-22 07:25:31 +01:00
Simon Spannagel
123facdbab Ensure deploy hook directory exists before using 2021-11-22 07:25:31 +01:00
Simon Spannagel
e1013946c5 Webroot: allow to set default webroot path, overwritten by per-cert path 2021-11-22 07:25:31 +01:00
Simon Spannagel
50d8921ec2 Create webroot directory if it doesn't exist 2021-11-22 07:25:31 +01:00
Simon Spannagel
e669ab0ac4 Replace shell with command module 2021-11-22 07:25:31 +01:00
Simon Spannagel
ca46eab49f Fix linting issues 2021-11-22 07:25:29 +01:00
Ryan Faircloth
c7e5eec8cc Update create-cert-webroot.yml
Removed debug logging of var as it could have protected information
2021-11-22 07:22:25 +01:00
Ryan Faircloth
23f593aaaf Fixes #39 adding new script for webroot
Fixes #41 support deployhook (webroot only)
Fixes #41 support for test CA
2021-11-22 07:22:15 +01:00
Jeff Geerling
027af9b3b3
Merge pull request #152 from stackbuilders/fix_install_with_snap_debian
[#151] Skip "Enable classic snap support" on Debian
2021-10-25 10:20:54 -05:00
Jeff Geerling
7317dbcabe Fix lint warnings. 2021-10-25 10:19:58 -05:00
Jeff Geerling
aaf3dbd40a
Merge pull request #159 from jivanpal/snapd-start
Ensure snapd is started immediately
2021-10-25 10:04:22 -05:00
Jivan Pal
6647174286 Add conditional to handle old name of PowerTools repo for CentOS 8.2.2004 and earlier 2021-09-18 01:40:09 +01:00
Jivan Pal
3f8533436b Ensure snapd is started immediately 2021-09-17 21:44:35 +01:00
Jeff Geerling
7ad49929dd PR #80 touch-up for cosmetic purposes. 2021-05-28 14:49:49 -05:00
Jeff Geerling
6bb2ed6436
Merge pull request #80 from wvh-github/feature/create_pre_and_post_hook
create pre and post hooks
2021-05-28 14:47:32 -05:00
Jeff Geerling
515e8af98b
Update tasks/create-cert-standalone.yml 2021-05-28 14:39:45 -05:00
Jeff Geerling
b17976752c
Update tasks/create-cert-standalone.yml 2021-05-28 14:39:41 -05:00
Sebastián Estrella
02e1e4e148 [#151] Skip "Enable classic snap support" on Debian 2021-04-28 22:05:31 -05:00
Jeff Geerling
e34a21f0eb Set certbot_script variable for snap-based install. 2021-02-21 09:03:18 -06:00
Jeff Geerling
4f22d025cd Slight tweak, but it still won't work. 2021-01-19 12:07:46 -06:00
Jeff Geerling
ea88bfa03c Attempt to get snap based install working correctly. 2021-01-19 11:56:58 -06:00
Jeff Geerling
56ba6ad847 Fix syntax error with file module usage. 2021-01-19 11:02:58 -06:00
Jeff Geerling
0ba7078e8c Issue #134: Snap install method. 2021-01-19 10:54:42 -06:00
Jeff Geerling
9090d7d431
Merge pull request #127 from wzzrd/patch-1
Only enable PowerTools on CentOS
2020-12-27 00:05:59 -06:00
GuillaumeRemyCSI
51ff0b14a3
Fixed issue with PowerTools DNF module
PowerTools has been renamed to powertools on CentOS 8
2020-12-18 15:38:56 +01:00
Maxim Burgerhout
a9609e1da6
Only enable PowerTools on CentOS
The PowerTools repo exists only on CentOS, but the current selector ansible_os_family == 'RedHat' also evaluates to true on Fedora and RHEL, making this role fail.

This patch switches the when statement to only evaluate to true if really running on CentOS, which I think was the intention
2020-09-30 08:52:43 +02:00
Jeff Geerling
09c8986636 Issue #107: PowerTools required to install via package on CentOS 8. 2020-04-20 16:56:03 -05:00
Wout van Heeswijk
8164566c4f
create pre and post hooks
* Move 'stop' services to pre-hook and post-hook. This way they will also be stopped and started when renewing.

- remove service stop/start tasks
- add pre-hook/post-hook templates
- add pre-hook/pos-hook template tasks
- create missing directories at first run
- run pre and post hook during first manual run
2019-04-19 10:30:48 +02:00
Jeff Geerling
00dc226101 Fixes E305 linting error: use shell only when required. 2018-12-06 16:15:09 -06:00
Jeff Geerling
d8beca4c1a
Merge pull request #60 from michaelpporter/master
Supports check of wildcard certs
2018-09-27 21:59:28 -05:00
Jeff Geerling
5da6dd18cd Fix Ansible lint issues. 2018-09-26 21:32:28 -05:00
Michael Porter
ce4dacf632
Supports check of wildcard certs
Adds support to check for wildcard certs to not re-make them on subsequent runs
2018-09-23 14:58:52 -05:00
Jeff Geerling
d3f98e4258 Fixes #12: Document how to generate certs automatically using certbot --standalone. 2017-12-11 22:17:25 -06:00
Jeff Geerling
5f7c9e046c Issue #12: Fix standalone cert generation, add full build-test-teardown playbook. 2017-12-10 22:47:54 -06:00
Jeff Geerling
7651f0ac0b Issue #12: Add basic standalone certbot cert generation. 2017-12-06 22:48:30 -06:00
Jeff Geerling
574c0843c8 Fixes #37: Make renew command configurable. 2017-10-31 10:09:41 -05:00
exploide
1ca3e00b46 include distribution specific vars from files 2017-04-01 14:23:08 +02:00
Oskar Schöldström
e82a68e331 Support Ubuntu 16.04 out of the box 2017-03-25 18:15:43 +01:00
exploide
afa993333f renamed certbot_from_git variable to certbot_install_from_source and fixed some wording 2017-03-19 14:38:07 +01:00
exploide
f3a260e94e added possibility to install certbot from package management
- introduces a variable certbot_from_git
- adds install from package tasks
- makes a variable called certbot_script available (to handle certbot vs certbot-auto naming)
- fixes #18
2017-02-24 10:10:20 +01:00
exploide
35ceee9f1b restructured tasks such that subtask files are included
this is a preparation for installing certbot from package management
additionally, it might be useful when further tasks are added, e.g. for initial certificate retrieval
2017-02-23 20:00:42 +01:00
Kaurin
806d612fab
Adding 'force: yes' to the git section
to prevent 'local changes in working tree'
messages
2017-01-31 02:09:32 +00:00
Jeff Geerling
d76e3915fe Fixes #13: Add certbot-auto renew cron job. 2017-01-21 15:16:45 -06:00
Jeff Geerling
65071dd992 Fixes #5: Ensure certbot-auto is executable. 2016-07-10 22:21:19 -05:00
Jeff Geerling
444064222b Fixes #4: Update to use Certbot. Rename from letsencrypt to certbot. 2016-07-10 22:17:26 -05:00
Jeff Geerling
8b6c745801 Initial commit. 2016-03-08 10:49:09 -06:00