Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

Stab at making letsencrypt not change every run

Browse source
This commit is contained in:
Kevin Fenzi 2018-06-14 00:48:32 +00:00
parent 77fba2c6ed
commit 7e8decbfcf
1 changed files with 9 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

10
roles/letsencrypt/tasks/main.yml
View file

@ -1,7 +1,9 @@
- name: Generate (or renew) the certificate - name: Generate (or renew) the certificate
delegate_to: certgetter01.phx2.fedoraproject.org delegate_to: certgetter01.phx2.fedoraproject.org
command: certbot certonly -n --webroot --webroot-path /var/www/html/ -d {{','.join([site_name] + server_aliases)}} command: certbot certonly --keep -n --webroot --webroot-path /var/www/html/ -d {{','.join([site_name] + server_aliases)}}
run_once: true run_once: true
register: certbot_output
changed_when: "not ('no action taken' in certbot_output)"
tags: tags:
- letsencrypt - letsencrypt
@ -10,6 +12,7 @@
delegate_to: certgetter01.phx2.fedoraproject.org delegate_to: certgetter01.phx2.fedoraproject.org
command: cat /etc/letsencrypt/live/{{site_name}}/cert.pem command: cat /etc/letsencrypt/live/{{site_name}}/cert.pem
register: certbot_certificate register: certbot_certificate
when: "not ('no action taken' in certbot_output)"
tags: tags:
- letsencrypt - letsencrypt
@ -17,6 +20,7 @@
delegate_to: certgetter01.phx2.fedoraproject.org delegate_to: certgetter01.phx2.fedoraproject.org
command: cat /etc/letsencrypt/live/{{site_name}}/chain.pem command: cat /etc/letsencrypt/live/{{site_name}}/chain.pem
register: certbot_chain register: certbot_chain
when: "not ('no action taken' in certbot_output)"
tags: tags:
- letsencrypt - letsencrypt
@ -24,6 +28,7 @@
delegate_to: certgetter01.phx2.fedoraproject.org delegate_to: certgetter01.phx2.fedoraproject.org
command: cat /etc/letsencrypt/live/{{site_name}}/privkey.pem command: cat /etc/letsencrypt/live/{{site_name}}/privkey.pem
register: certbot_key register: certbot_key
when: "not ('no action taken' in certbot_output)"
tags: tags:
- letsencrypt - letsencrypt
@ -34,6 +39,7 @@
owner=root owner=root
group=root group=root
mode=0644 mode=0644
when: "not ('no action taken' in certbot_output)"
notify: notify:
- reload proxyhttpd - reload proxyhttpd
tags: tags:
@ -46,6 +52,7 @@
owner=root owner=root
group=root group=root
mode=0644 mode=0644
when: "not ('no action taken' in certbot_output)"
notify: notify:
- reload proxyhttpd - reload proxyhttpd
tags: tags:
@ -58,6 +65,7 @@
owner=root owner=root
group=root group=root
mode=0600 mode=0600
when: "not ('no action taken' in certbot_output)"
notify: notify:
- reload proxyhttpd - reload proxyhttpd
tags: tags: