mirror of
https://github.com/geerlingguy/ansible-role-certbot.git
synced 2025-04-19 17:01:37 +02:00
43 lines
1.6 KiB
YAML
43 lines
1.6 KiB
YAML
---
|
|
# Certbot auto-renew cron job configuration (for certificate renewals).
|
|
certbot_auto_renew: true
|
|
certbot_auto_renew_user: "{{ ansible_user }}"
|
|
certbot_auto_renew_hour: 3
|
|
certbot_auto_renew_minute: 30
|
|
certbot_auto_renew_options: "--quiet --no-self-upgrade"
|
|
certbot_testmode: false
|
|
certbot_hsts: false
|
|
|
|
|
|
# Parameters used when creating new Certbot certs.
|
|
certbot_create_if_missing: no
|
|
certbot_create_method: standalone
|
|
certbot_admin_email: email@example.com
|
|
certbot_certs: []
|
|
# - email: janedoe@example.com
|
|
# domains:
|
|
# - example1.com
|
|
# - example2.com
|
|
# - domains:
|
|
# - example3.com
|
|
certbot_create_command: "{{ certbot_script }} certonly --{{ certbot_create_method }} {{ certbot_webroot_arg if certbot_create_method == 'webroot' else '' }} {{ '--hsts' if certbot_hsts else '' }} {{ '--test-cert' if certbot_testmode else '' }} --noninteractive --agree-tos --email {{ cert_item.email | default(certbot_admin_email) }} -d {{ cert_item.domains | join(',') }} {{ '--deploy-hook /etc/letsencrypt/renewal-hooks/deploy/ansible.sh' if certbot_deployhook is defined else '' }}"
|
|
certbot_create_standalone_stop_services:
|
|
- nginx
|
|
# - apache
|
|
# - varnish
|
|
|
|
# To install from source (on older OSes or if you need a specific or newer
|
|
# version of Certbot), set this variable to `yes` and configure other options.
|
|
certbot_install_from_source: no
|
|
certbot_repo: https://github.com/certbot/certbot.git
|
|
certbot_version: master
|
|
certbot_keep_updated: yes
|
|
|
|
# Where to put Certbot when installing from source.
|
|
certbot_dir: /opt/certbot
|
|
|
|
#where the web root is
|
|
certbot_webroot: "/var/www/html"
|
|
certbot_webroot_arg: "-w {{ certbot_webroot }}"
|
|
|
