Compare commits

...

5 Commits

Author SHA1 Message Date
KornKalle
a3211d4af0
Merge 3d79c9aff80516a82174f9e1cdf281fbef863637 into 3b3cc546d123c06b294182c747cacaab83174fca 2025-05-05 09:28:42 +02:00
Jeff Geerling
3b3cc546d1 Syntax adjust. 2025-05-04 20:02:06 -05:00
nils
3d79c9aff8 add certbot-nginx support, remove ubuntu 16.04 2024-12-09 11:05:09 +01:00
nils
63374e662e add nginx plugin 2024-12-09 10:38:23 +01:00
nils
0385c8b659 add nginx support 2024-06-04 14:56:21 +02:00
7 changed files with 22 additions and 17 deletions

View File

@ -5,11 +5,11 @@ certbot_auto_renew_user: "{{ ansible_user | default(lookup('env', 'USER')) }}"
certbot_auto_renew_hour: "3" certbot_auto_renew_hour: "3"
certbot_auto_renew_minute: "30" certbot_auto_renew_minute: "30"
certbot_auto_renew_options: "--quiet" certbot_auto_renew_options: "--quiet"
certbot_package: certbot
certbot_testmode: false certbot_testmode: false
certbot_hsts: false certbot_hsts: false
# Parameters used when creating new Certbot certs. # Parameters used when creating new Certbot certs.
certbot_create_if_missing: false certbot_create_if_missing: false
certbot_create_method: standalone certbot_create_method: standalone

View File

@ -0,0 +1,9 @@
---
- name: Check if certificate already exists.
stat:
path: /etc/letsencrypt/live/{{ cert_item.domains | first }}/cert.pem
register: letsencrypt_cert
- name: Generate new certificate if one doesn't exist.
command: "{{ certbot_create_command }}"
when: not letsencrypt_cert.stat.exists

View File

@ -1,8 +0,0 @@
---
- name: Load a variable file based on the OS type, or a default if not found.
include_vars: "{{ item }}"
with_first_found:
- "{{ ansible_distribution }}-{{ ansible_distribution_version }}.yml"
- "{{ ansible_distribution }}.yml"
- "{{ ansible_os_family }}.yml"
- "default.yml"

View File

@ -1,7 +1,9 @@
--- ---
- name: Install Certbot. - name: Install Certbot.
package: "name={{ certbot_package }} state=present" package:
name: "{{ certbot_package }}"
state: present
- name: Set Certbot script variable. - name: Set Certbot script variable.
set_fact: set_fact:
certbot_script: "{{ certbot_package }}" certbot_script: "certbot"

View File

@ -1,6 +1,4 @@
--- ---
- import_tasks: include-vars.yml
- import_tasks: setup-RedHat.yml - import_tasks: setup-RedHat.yml
when: ansible_os_family == 'RedHat' when: ansible_os_family == 'RedHat'
@ -29,5 +27,13 @@
loop_control: loop_control:
loop_var: cert_item loop_var: cert_item
- include_tasks: create-cert-nginx.yml
with_items: "{{ certbot_certs }}"
when:
- certbot_create_if_missing
- certbot_create_method == 'nginx'
loop_control:
loop_var: cert_item
- import_tasks: renew-cron.yml - import_tasks: renew-cron.yml
when: certbot_auto_renew when: certbot_auto_renew

View File

@ -1,2 +0,0 @@
---
certbot_package: letsencrypt

View File

@ -1,2 +0,0 @@
---
certbot_package: certbot