Attempt to fix the certbot role for site-000$nr

This is a very ugly fix, but it is currently hitting live sites.

Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
This commit is contained in:
Patrick Uiterwijk 2018-10-04 09:01:58 +02:00
parent 37fcc303ed
commit f0b5a2ad5f

View file

@ -8,10 +8,20 @@
tags: tags:
- letsencrypt - letsencrypt
# Find the directory to use
- name: Get the directory to use
delegate_to: certgetter01.phx2.fedoraproject.org
# Sometimes we get directories like site-0001, site-0002, etc. We want the latest
shell: "file /etc/letsencrypt/live/{{site_name}}* | tail -1 | awk '{print $1} | sed -e 's/://' | tr -d '\n'"
register: certbot_dir
changed_when: 'false'
tags:
- letsencrypt
# And once we do that, we need to copy some things. # And once we do that, we need to copy some things.
- name: Obtain the certificate - name: Obtain the certificate
delegate_to: certgetter01.phx2.fedoraproject.org delegate_to: certgetter01.phx2.fedoraproject.org
command: cat /etc/letsencrypt/live/{{site_name}}/cert.pem command: cat {{certbot_dir.stdout}}/cert.pem
register: certbot_certificate register: certbot_certificate
changed_when: 'false' changed_when: 'false'
tags: tags:
@ -19,7 +29,7 @@
- name: Obtain the intermediate certificate - name: Obtain the intermediate certificate
delegate_to: certgetter01.phx2.fedoraproject.org delegate_to: certgetter01.phx2.fedoraproject.org
command: cat /etc/letsencrypt/live/{{site_name}}/chain.pem command: cat {{certbot_dir}}/chain.pem
register: certbot_chain register: certbot_chain
changed_when: 'false' changed_when: 'false'
tags: tags:
@ -27,7 +37,7 @@
- name: Obtain the key - name: Obtain the key
delegate_to: certgetter01.phx2.fedoraproject.org delegate_to: certgetter01.phx2.fedoraproject.org
command: cat /etc/letsencrypt/live/{{site_name}}/privkey.pem command: cat {{certbot_dir}}/privkey.pem
register: certbot_key register: certbot_key
changed_when: 'false' changed_when: 'false'
tags: tags: