mirror of
https://github.com/geerlingguy/ansible-role-certbot.git
synced 2025-06-14 22:51:34 +02:00
Compare commits
5 Commits
9e290f206c
...
a3211d4af0
Author | SHA1 | Date | |
---|---|---|---|
|
a3211d4af0 | ||
|
3b3cc546d1 | ||
|
3d79c9aff8 | ||
|
63374e662e | ||
|
0385c8b659 |
@ -5,11 +5,11 @@ certbot_auto_renew_user: "{{ ansible_user | default(lookup('env', 'USER')) }}"
|
|||||||
certbot_auto_renew_hour: "3"
|
certbot_auto_renew_hour: "3"
|
||||||
certbot_auto_renew_minute: "30"
|
certbot_auto_renew_minute: "30"
|
||||||
certbot_auto_renew_options: "--quiet"
|
certbot_auto_renew_options: "--quiet"
|
||||||
|
certbot_package: certbot
|
||||||
|
|
||||||
certbot_testmode: false
|
certbot_testmode: false
|
||||||
certbot_hsts: false
|
certbot_hsts: false
|
||||||
|
|
||||||
|
|
||||||
# Parameters used when creating new Certbot certs.
|
# Parameters used when creating new Certbot certs.
|
||||||
certbot_create_if_missing: false
|
certbot_create_if_missing: false
|
||||||
certbot_create_method: standalone
|
certbot_create_method: standalone
|
||||||
|
9
tasks/create-cert-nginx.yml
Normal file
9
tasks/create-cert-nginx.yml
Normal file
@ -0,0 +1,9 @@
|
|||||||
|
---
|
||||||
|
- name: Check if certificate already exists.
|
||||||
|
stat:
|
||||||
|
path: /etc/letsencrypt/live/{{ cert_item.domains | first }}/cert.pem
|
||||||
|
register: letsencrypt_cert
|
||||||
|
|
||||||
|
- name: Generate new certificate if one doesn't exist.
|
||||||
|
command: "{{ certbot_create_command }}"
|
||||||
|
when: not letsencrypt_cert.stat.exists
|
@ -1,8 +0,0 @@
|
|||||||
---
|
|
||||||
- name: Load a variable file based on the OS type, or a default if not found.
|
|
||||||
include_vars: "{{ item }}"
|
|
||||||
with_first_found:
|
|
||||||
- "{{ ansible_distribution }}-{{ ansible_distribution_version }}.yml"
|
|
||||||
- "{{ ansible_distribution }}.yml"
|
|
||||||
- "{{ ansible_os_family }}.yml"
|
|
||||||
- "default.yml"
|
|
@ -1,7 +1,9 @@
|
|||||||
---
|
---
|
||||||
- name: Install Certbot.
|
- name: Install Certbot.
|
||||||
package: "name={{ certbot_package }} state=present"
|
package:
|
||||||
|
name: "{{ certbot_package }}"
|
||||||
|
state: present
|
||||||
|
|
||||||
- name: Set Certbot script variable.
|
- name: Set Certbot script variable.
|
||||||
set_fact:
|
set_fact:
|
||||||
certbot_script: "{{ certbot_package }}"
|
certbot_script: "certbot"
|
||||||
|
@ -1,6 +1,4 @@
|
|||||||
---
|
---
|
||||||
- import_tasks: include-vars.yml
|
|
||||||
|
|
||||||
- import_tasks: setup-RedHat.yml
|
- import_tasks: setup-RedHat.yml
|
||||||
when: ansible_os_family == 'RedHat'
|
when: ansible_os_family == 'RedHat'
|
||||||
|
|
||||||
@ -29,5 +27,13 @@
|
|||||||
loop_control:
|
loop_control:
|
||||||
loop_var: cert_item
|
loop_var: cert_item
|
||||||
|
|
||||||
|
- include_tasks: create-cert-nginx.yml
|
||||||
|
with_items: "{{ certbot_certs }}"
|
||||||
|
when:
|
||||||
|
- certbot_create_if_missing
|
||||||
|
- certbot_create_method == 'nginx'
|
||||||
|
loop_control:
|
||||||
|
loop_var: cert_item
|
||||||
|
|
||||||
- import_tasks: renew-cron.yml
|
- import_tasks: renew-cron.yml
|
||||||
when: certbot_auto_renew
|
when: certbot_auto_renew
|
||||||
|
@ -1,2 +0,0 @@
|
|||||||
---
|
|
||||||
certbot_package: letsencrypt
|
|
@ -1,2 +0,0 @@
|
|||||||
---
|
|
||||||
certbot_package: certbot
|
|
Loading…
x
Reference in New Issue
Block a user