mirror of
https://github.com/geerlingguy/ansible-role-certbot.git
synced 2025-04-20 17:21:42 +02:00
8164566c4f
* Move 'stop' services to pre-hook and post-hook. This way they will also be stopped and started when renewing. - remove service stop/start tasks - add pre-hook/post-hook templates - add pre-hook/pos-hook template tasks - create missing directories at first run - run pre and post hook during first manual run
39 lines
1.1 KiB
YAML
39 lines
1.1 KiB
YAML
---
|
|
- name: Check if certificate already exists.
|
|
stat:
|
|
path: /etc/letsencrypt/live/{{ cert_item.domains | first | replace('*.', '') }}/cert.pem
|
|
register: letsencrypt_cert
|
|
|
|
- name: create pre and post hook folders because those don't exist yet on a fresh install
|
|
file:
|
|
path: /etc/letsencrypt/renewal-hooks/{{ item }}
|
|
state: directory
|
|
mode: 0755
|
|
owner: root
|
|
group: root
|
|
with_items:
|
|
- pre
|
|
- post
|
|
|
|
- name: Create pre hook to stop services
|
|
template:
|
|
src: stop_services.j2
|
|
dest: /etc/letsencrypt/renewal-hooks/pre/stop_services
|
|
owner: root
|
|
group: root
|
|
mode: 0750
|
|
when: certbot_create_standalone_stop_services is defined and certbot_create_standalone_stop_services
|
|
|
|
- name: create post hook to start services
|
|
template:
|
|
src: start_services.j2
|
|
dest: /etc/letsencrypt/renewal-hooks/post/start_services
|
|
owner: root
|
|
group: root
|
|
mode: 0750
|
|
when: certbot_create_standalone_stop_services is defined and certbot_create_standalone_stop_services
|
|
|
|
- name: Generate new certificate if one doesn't exist.
|
|
command: "{{ certbot_create_command }}"
|
|
when: not letsencrypt_cert.stat.exists
|
