Compare commits

..
11 Commits
Author SHA1 Message Date
Jeff GeerlingandGitHub cfd9655ed0 Merge pull request #192 from fapdash/patch-1
Run hooks only for standalone mode
2023-06-17 22:22:43 -05:00
Jeff GeerlingandGitHub 47203f3b92 Merge pull request #197 from markstos/no-self-upgrade
remove deprecated --no-self-upgrade flag
2023-06-17 22:21:03 -05:00
Jeff GeerlingandGitHub a3b34ef499 Merge pull request #196 from Kaezon/fix-lint
fixed lint
2023-06-17 22:20:04 -05:00
Mark Stosberg 199f940604 remove deprecated --no-self-upgrade flag
Including it will generate warnings
2023-05-19 17:39:05 -04:00
Brett Costabile 1b04270982 fixed lint 2023-05-09 10:14:27 -04:00
Jeff Geerling a056da763e Fix Molecule CI workflow since docker plugin has moved. 2023-04-20 17:27:06 -05:00
FAPandGitHub 2deba31679 Check for both conditions (squash me) 2023-02-20 12:26:44 +01:00
FAPandGitHub d30ddd946a Run hooks only for standalone mode
If the `certbot_create_method` is set to `webroot` the `stop_services` and `start_services` hook shouldn't be run.
2023-02-01 15:13:09 +01:00
Jeff Geerling 3d55be0a54 Fix Molecule CI workflow for Ubuntu 22.04 GitHub Actions. 2022-12-06 18:23:34 -06:00
Jeff Geerling 3f133ad7ab Remove deprecated warn arg from command and shell module invocations. 2022-11-26 22:51:08 -06:00
Jeff Geerling c6297ddebb Add role_name_check skipping to all molecule test suites. 2022-06-01 22:20:31 -05:00
6 changed files with 24 additions and 23 deletions
+1 -1
View File
@@ -74,7 +74,7 @@ jobs:
python-version: '3.x' python-version: '3.x'
- name: Install test dependencies. - name: Install test dependencies.
run: pip3 install ansible molecule[docker] docker run: pip3 install ansible molecule molecule-plugins[docker] docker
- name: Run Molecule tests. - name: Run Molecule tests.
run: molecule test run: molecule test
+3
View File
@@ -5,6 +5,9 @@ rules:
line-length: line-length:
max: 180 max: 180
level: warning level: warning
indentation:
spaces: 2
indent-sequences: consistent
ignore: | ignore: |
.github/stale.yml .github/stale.yml
+1 -1
View File
@@ -20,7 +20,7 @@ Controls how Certbot is installed. Available options are 'package', 'snap', and
certbot_auto_renew_user: "{{ ansible_user | default(lookup('env', 'USER')) }}" certbot_auto_renew_user: "{{ ansible_user | default(lookup('env', 'USER')) }}"
certbot_auto_renew_hour: "3" certbot_auto_renew_hour: "3"
certbot_auto_renew_minute: "30" certbot_auto_renew_minute: "30"
certbot_auto_renew_options: "--quiet --no-self-upgrade" certbot_auto_renew_options: "--quiet"
By default, this role configures a cron job to run under the provided user account at the given hour and minute, every day. The defaults run `certbot renew` (or `certbot-auto renew`) via cron every day at 03:30:00 by the user you use in your Ansible playbook. It's preferred that you set a custom user/hour/minute so the renewal is during a low-traffic period and done by a non-root user account. By default, this role configures a cron job to run under the provided user account at the given hour and minute, every day. The defaults run `certbot renew` (or `certbot-auto renew`) via cron every day at 03:30:00 by the user you use in your Ansible playbook. It's preferred that you set a custom user/hour/minute so the renewal is during a low-traffic period and done by a non-root user account.
+3 -3
View File
@@ -4,7 +4,7 @@ certbot_auto_renew: true
certbot_auto_renew_user: "{{ ansible_user | default(lookup('env', 'USER')) }}" certbot_auto_renew_user: "{{ ansible_user | default(lookup('env', 'USER')) }}"
certbot_auto_renew_hour: "3" certbot_auto_renew_hour: "3"
certbot_auto_renew_minute: "30" certbot_auto_renew_minute: "30"
certbot_auto_renew_options: "--quiet --no-self-upgrade" certbot_auto_renew_options: "--quiet"
certbot_testmode: false certbot_testmode: false
certbot_hsts: false certbot_hsts: false
@@ -37,10 +37,10 @@ certbot_create_command: >-
{{ cert_item.webroot | default(certbot_webroot) if certbot_create_method == 'webroot' else '' }} {{ cert_item.webroot | default(certbot_webroot) if certbot_create_method == 'webroot' else '' }}
-d {{ cert_item.domains | join(',') }} -d {{ cert_item.domains | join(',') }}
{{ '--pre-hook /etc/letsencrypt/renewal-hooks/pre/stop_services' {{ '--pre-hook /etc/letsencrypt/renewal-hooks/pre/stop_services'
if certbot_create_standalone_stop_services if certbot_create_standalone_stop_services and certbot_create_method == 'standalone'
else '' }} else '' }}
{{ '--post-hook /etc/letsencrypt/renewal-hooks/post/start_services' {{ '--post-hook /etc/letsencrypt/renewal-hooks/post/start_services'
if certbot_create_standalone_stop_services if certbot_create_standalone_stop_services and certbot_create_method == 'standalone'
else '' }} else '' }}
certbot_create_standalone_stop_services: certbot_create_standalone_stop_services:
+3 -1
View File
@@ -1,4 +1,5 @@
--- ---
role_name_check: 1
dependency: dependency:
name: galaxy name: galaxy
driver: driver:
@@ -8,7 +9,8 @@ platforms:
image: "geerlingguy/docker-${MOLECULE_DISTRO:-centos7}-ansible:latest" image: "geerlingguy/docker-${MOLECULE_DISTRO:-centos7}-ansible:latest"
command: ${MOLECULE_DOCKER_COMMAND:-""} command: ${MOLECULE_DOCKER_COMMAND:-""}
volumes: volumes:
- /sys/fs/cgroup:/sys/fs/cgroup:ro - /sys/fs/cgroup:/sys/fs/cgroup:rw
cgroupns_mode: host
privileged: true privileged: true
pre_build_image: true pre_build_image: true
provisioner: provisioner:
+13 -17
View File
@@ -9,26 +9,22 @@
- block: - block:
- name: Enable DNF module for CentOS 8.3+. - name: Enable DNF module for CentOS 8.3+.
shell: | shell: |
dnf config-manager --set-enabled powertools dnf config-manager --set-enabled powertools
args: register: dnf_module_enable
warn: false changed_when: false
register: dnf_module_enable
changed_when: false
when: ansible_facts['distribution_version'] is version('8.3', '>=') when: ansible_facts['distribution_version'] is version('8.3', '>=')
- name: Enable DNF module for CentOS 8.08.2. - name: Enable DNF module for CentOS 8.08.2.
shell: | shell: |
dnf config-manager --set-enabled PowerTools dnf config-manager --set-enabled PowerTools
args: register: dnf_module_enable
warn: false changed_when: false
register: dnf_module_enable
changed_when: false
when: ansible_facts['distribution_version'] is version('8.2', '<=') when: ansible_facts['distribution_version'] is version('8.2', '<=')
when: when:
- ansible_distribution == 'CentOS' - ansible_distribution == 'CentOS'
- ansible_distribution_major_version | int >= 8 - ansible_distribution_major_version | int >= 8