Infrastructure/ansible
3
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

Always try to redeploy the certs in case they were refreshed in another run

Browse source 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
This commit is contained in:
Patrick Uiterwijk 2018-07-26 00:00:09 +00:00
parent 4d4a7ff84c
commit 6711cce1f4
1 changed files with 3 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

9
roles/letsencrypt/tasks/main.yml
View file

@ -13,7 +13,7 @@
delegate_to: certgetter01.phx2.fedoraproject.org delegate_to: certgetter01.phx2.fedoraproject.org
command: cat /etc/letsencrypt/live/{{site_name}}/cert.pem command: cat /etc/letsencrypt/live/{{site_name}}/cert.pem
register: certbot_certificate register: certbot_certificate
when: "not ('not yet due for renewal' in certbot_output.stderr)" changed_when: 'false'
tags: tags:
- letsencrypt - letsencrypt
@ -21,7 +21,7 @@
delegate_to: certgetter01.phx2.fedoraproject.org delegate_to: certgetter01.phx2.fedoraproject.org
command: cat /etc/letsencrypt/live/{{site_name}}/chain.pem command: cat /etc/letsencrypt/live/{{site_name}}/chain.pem
register: certbot_chain register: certbot_chain
when: "not ('not yet due for renewal' in certbot_output.stderr)" changed_when: 'false'
tags: tags:
- letsencrypt - letsencrypt
@ -29,7 +29,7 @@
delegate_to: certgetter01.phx2.fedoraproject.org delegate_to: certgetter01.phx2.fedoraproject.org
command: cat /etc/letsencrypt/live/{{site_name}}/privkey.pem command: cat /etc/letsencrypt/live/{{site_name}}/privkey.pem
register: certbot_key register: certbot_key
when: "not ('not yet due for renewal' in certbot_output.stderr)" changed_when: 'false'
tags: tags:
- letsencrypt - letsencrypt
@ -40,7 +40,6 @@
owner=root owner=root
group=root group=root
mode=0644 mode=0644
when: "not ('not yet due for renewal' in certbot_output.stderr)"
notify: notify:
- reload proxyhttpd - reload proxyhttpd
tags: tags:
@ -53,7 +52,6 @@
owner=root owner=root
group=root group=root
mode=0644 mode=0644
when: "not ('not yet due for renewal' in certbot_output.stderr)"
notify: notify:
- reload proxyhttpd - reload proxyhttpd
tags: tags:
@ -66,7 +64,6 @@
owner=root owner=root
group=root group=root
mode=0600 mode=0600
when: "not ('not yet due for renewal' in certbot_output.stderr)"
notify: notify:
- reload proxyhttpd - reload proxyhttpd
tags: tags: