Compare commits
No commits in common. "d5a03479af3b5d443bb130be4dab2de097b7516b" and "cba94e7929fc06749c092b0918a8fce410e2c7be" have entirely different histories.
d5a03479af
...
cba94e7929
8 changed files with 0 additions and 59 deletions
|
@ -10,9 +10,3 @@ user_mgmt:
|
||||||
fritz:
|
fritz:
|
||||||
state: present
|
state: present
|
||||||
groups: sudo
|
groups: sudo
|
||||||
|
|
||||||
certbot_certs:
|
|
||||||
- [ "wiki.ccchb.de" ]
|
|
||||||
- [ "ccchb.de", "www.ccchb.de" ]
|
|
||||||
- [ "files.ccchb.de" ]
|
|
||||||
|
|
||||||
|
|
|
@ -1,11 +0,0 @@
|
||||||
---
|
|
||||||
certbot_admin_email: hostmaster@ccchb.de
|
|
||||||
|
|
||||||
certbot_package: letsencrypt
|
|
||||||
|
|
||||||
certbot_method: webroot
|
|
||||||
certbot_webroot: /var/www/html
|
|
||||||
|
|
||||||
certbot_certs: []
|
|
||||||
|
|
||||||
certbot_renew: true
|
|
|
@ -1,22 +0,0 @@
|
||||||
---
|
|
||||||
- name: Enable certbot timer.
|
|
||||||
systemd:
|
|
||||||
name: certbot.timer
|
|
||||||
enabled: yes
|
|
||||||
|
|
||||||
- name: Install certbot.
|
|
||||||
package:
|
|
||||||
name: "{{ certbot_package }}"
|
|
||||||
state: present
|
|
||||||
|
|
||||||
- name: Check for presence of certificates.
|
|
||||||
stat:
|
|
||||||
path: "/etc/letsencrypt/live/{{ item | first | replace(\"*.\", \"\") }}/cert.pem"
|
|
||||||
register: certs_presence
|
|
||||||
loop: "{{ certbot_certs }}"
|
|
||||||
|
|
||||||
- name: Obtain certificates.
|
|
||||||
include_tasks: 'obtain_{{ certbot_method }}.yml'
|
|
||||||
when: not item.stat.exists
|
|
||||||
loop: "{{ certs_presence.results }}"
|
|
||||||
...
|
|
|
@ -1,4 +0,0 @@
|
||||||
---
|
|
||||||
- name: "Obtain certificate for {{ item.item | join(',') }}"
|
|
||||||
command: "certbot certonly --agree-tos -m {{ certbot_admin_email | quote }} -d {{ item.item | join(',') }} --standalone"
|
|
||||||
...
|
|
|
@ -1,4 +0,0 @@
|
||||||
---
|
|
||||||
- name: "Obtain certificate for {{ item.item | join(',') }}"
|
|
||||||
command: "certbot certonly --agree-tos -m {{ certbot_admin_email | quote }} -d {{ item.item | join(',') }} --webroot -w {{ certbot_webroot | quote }}"
|
|
||||||
...
|
|
|
@ -1,4 +0,0 @@
|
||||||
location /.well-known/acme-challenge/ {
|
|
||||||
alias {{ certbot_webroot }}/.well-known/acme-challenge/;
|
|
||||||
allow all;
|
|
||||||
}
|
|
1
site.yml
1
site.yml
|
@ -6,4 +6,3 @@
|
||||||
- import_playbook: bhyve.yml
|
- import_playbook: bhyve.yml
|
||||||
- import_playbook: mail.yml
|
- import_playbook: mail.yml
|
||||||
- import_playbook: restic.yml
|
- import_playbook: restic.yml
|
||||||
- import_playbook: wiki.yml
|
|
||||||
|
|
7
wiki.yml
7
wiki.yml
|
@ -1,7 +0,0 @@
|
||||||
---
|
|
||||||
- hosts:
|
|
||||||
- wiki
|
|
||||||
become: yes
|
|
||||||
roles:
|
|
||||||
- mediawiki
|
|
||||||
- certbot
|
|
Loading…
Reference in a new issue