80 lines
1.8 KiB
YAML
80 lines
1.8 KiB
YAML
---
|
|
- import_tasks: remove_conflicting.yaml
|
|
tags: [ never, acme_remove_conflicting ]
|
|
|
|
- name: Install Dehydrated
|
|
tags: [ acme, acme_install ]
|
|
block:
|
|
- name: Install dependencies
|
|
apt:
|
|
name: ssl-cert
|
|
state: present
|
|
|
|
- name: Install Dehydrated
|
|
apt:
|
|
name: dehydrated
|
|
state: present
|
|
default_release: "{{ ansible_distribution_release }}-backports"
|
|
|
|
- name: Install config file
|
|
template:
|
|
src: config.sh
|
|
dest: /etc/dehydrated/conf.d/ansible.sh
|
|
owner: root
|
|
group: root
|
|
mode: 0755
|
|
notify: update_contact_info
|
|
|
|
- name: Install deploy hook
|
|
template:
|
|
src: deploy.sh
|
|
dest: /etc/dehydrated/conf.d/deploy.sh
|
|
owner: root
|
|
group: root
|
|
mode: 0755
|
|
|
|
- name: Install cronjob
|
|
template:
|
|
src: cron
|
|
dest: /etc/cron.d/dehydrated
|
|
owner: root
|
|
group: root
|
|
mode: 0644
|
|
|
|
- name: Create Nginx snippet snippets dir
|
|
file:
|
|
state: directory
|
|
path: /etc/nginx/snippets
|
|
owner: root
|
|
group: root
|
|
mode: 0755
|
|
|
|
- name: Install Nginx snippet
|
|
template:
|
|
src: nginx-snippet.conf
|
|
dest: /etc/nginx/snippets/acme.conf
|
|
owner: root
|
|
group: root
|
|
mode: 0644
|
|
|
|
- name: Register account
|
|
command: dehydrated --register --accept-terms
|
|
args:
|
|
creates: /var/lib/dehydrated/accounts
|
|
|
|
- tags: [ acme, acme_certs ]
|
|
block:
|
|
- name: Configure certificates
|
|
template:
|
|
src: domains.txt
|
|
dest: /etc/dehydrated/domains.txt
|
|
owner: root
|
|
group: root
|
|
mode: 0644
|
|
notify: query_certificates
|
|
|
|
- name: Symlink SAN domains
|
|
include_tasks: san_domains_loop.yaml
|
|
loop: "{{ acme_san_domains|default([]) }}"
|
|
loop_control:
|
|
loop_var: domains
|