mirror of
https://github.com/geerlingguy/ansible-role-certbot.git
synced 2025-04-19 17:01:37 +02:00
54 lines
1.4 KiB
YAML
54 lines
1.4 KiB
YAML
---
|
|
- name: Get installed certificates.
|
|
shell: |
|
|
{{ certbot_script }} certificates | grep "Domains:" | awk '{ gsub(/ Domains: /,""); print }'
|
|
changed_when: false
|
|
register: letsencrypt_certs
|
|
|
|
- name: Set cert_exists to false (to check if cert exists).
|
|
set_fact:
|
|
cert_exists: false
|
|
|
|
- name: Check if certificate already exists.
|
|
set_fact:
|
|
cert_exists: true
|
|
when: cert_item.domains | sort | difference(item) == []
|
|
with_list: "{{ letsencrypt_certs.stdout_lines }}"
|
|
|
|
- name: Ensure pre and post hook folders exist.
|
|
file:
|
|
path: /etc/letsencrypt/renewal-hooks/{{ item }}
|
|
state: directory
|
|
mode: 0755
|
|
owner: root
|
|
group: root
|
|
with_items:
|
|
- pre
|
|
- post
|
|
|
|
- name: Create pre hook to stop services.
|
|
template:
|
|
src: stop_services.j2
|
|
dest: /etc/letsencrypt/renewal-hooks/pre/stop_services
|
|
owner: root
|
|
group: root
|
|
mode: 0750
|
|
when:
|
|
- certbot_create_standalone_stop_services is defined
|
|
- certbot_create_standalone_stop_services
|
|
|
|
- name: Create post hook to start services.
|
|
template:
|
|
src: start_services.j2
|
|
dest: /etc/letsencrypt/renewal-hooks/post/start_services
|
|
owner: root
|
|
group: root
|
|
mode: 0750
|
|
when:
|
|
- certbot_create_standalone_stop_services is defined
|
|
- certbot_create_standalone_stop_services
|
|
|
|
- name: Generate new certificate if one doesn't exist.
|
|
command: "{{ certbot_create_command }}"
|
|
when: not cert_exists
|
