gregandev
/
ansible-role-certbot
mirror of https://github.com/geerlingguy/ansible-role-certbot
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
Ansible Role - Certbot (for Let's Encrypt)
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
2 Commits
3 Branches
21 Tags
1.5 MiB
 
Tag: Branch: Tree: 444064222b
Branches Tags
${ item.name }
Create tag ${ searchTerm }
Create branch ${ searchTerm }
from '444064222b'
${ noResults }
Jeff Geerling 444064222b
Fixes #4: Update to use Certbot. Rename from letsencrypt to certbot. 		9 years ago
defaults Fixes #4: Update to use Certbot. Rename from letsencrypt to certbot. 9 years ago
handlers Initial commit. 9 years ago
meta Fixes #4: Update to use Certbot. Rename from letsencrypt to certbot. 9 years ago
tasks Fixes #4: Update to use Certbot. Rename from letsencrypt to certbot. 9 years ago
tests Initial commit. 9 years ago
.travis.yml Fixes #4: Update to use Certbot. Rename from letsencrypt to certbot. 9 years ago
README.md Fixes #4: Update to use Certbot. Rename from letsencrypt to certbot. 9 years ago

README.md

Ansible Role: Certbot (for Let's Encrypt)

Build Status

Installs Certbot (for Let's Encrypt) for RHEL/CentOS or Debian/Ubuntu.

Requirements

Let's Encrypt requires git to be installed. You can install using the geerlingguy.git role.

Role Variables

None.

Dependencies

None.

Example Playbook

- hosts: servers
  roles:
    - geerlingguy.letsencrypt

After installation, you can create certificates using the certbot-auto script, which by default is installed inside the configured certbot_dir, so by default, /opt/certbot/certbot-auto. Here are some example commands to configure certificates with Certbot:

# Automatically add certs for all Apache virtualhosts (use with caution!).
/opt/certbot/certbot-auto --apache

# Generate certs, but don't modify Apache configuration (safer).
/opt/certbot/certbot-auto --apache certonly

To set up renewals, you should run the following command periodically (e.g. once or twice per day):

/opt/certbot/certbot-auto renew --quiet --no-self-upgrade

You can test the auto-renewal (without actually renewing the cert) with the command:

/opt/certbot/certbot-auto renew --dry-run

See full documentation and options on the Certbot website.

License

MIT / BSD

Author Information

This role was created in 2016 by Jeff Geerling, author of Ansible for DevOps.