retrace: define letsencrypt variable

2020-03-25 09:59:14 +01:00 · 2020-03-25 09:59:14 +01:00 · 502377d31d
commit 502377d31d
parent 86a3b2a613
2 changed files with 11 additions and 2 deletions
--- a/inventory/host_vars/retrace-stg.aws.fedoraproject.org
+++ b/inventory/host_vars/retrace-stg.aws.fedoraproject.org
@ -30,6 +30,16 @@ sar_script: '/usr/bin/faf sar'
 sar_script_user: faf
 sar_output_file: faf.json

+# consumed by roles/copr/certbot
+letsencrypt:
+  predefined_deploy_script: httpd
+  certificates:
+    retrace-stg.aws.fedoraproject.org:
+      domains:
+      - retrace-stg.aws.fedoraproject.org
+      challenge_dir: /var/www/html
+      mail: ekulik@redhat.com
+
 nagios_Check_Services:
  mail: false
  nrpe: false
--- a/roles/abrt/faf-pre/tasks/ssl.yml
+++ b/roles/abrt/faf-pre/tasks/ssl.yml
@ -1,12 +1,11 @@
 ---
 - name: install letsencrypt ssl certificates for dev
  include_role: name=copr/certbot
-  when: devel|bool
  tags:
  - config

 - name: install copr-frontend ssl vhost
  template: src="httpd/retrace_ssl.conf.j2" dest="/etc/httpd/conf.d/retrace_ssl.conf"
-  when: devel|bool
+  when: letsencrypt is defined
  tags:
  - config