feat: add certificate request task
This commit is contained in:
23
tasks/request-certificate.yml
Normal file
23
tasks/request-certificate.yml
Normal file
@@ -0,0 +1,23 @@
|
||||
|
||||
- name: Request SSL certifiate to letsencrypt
|
||||
block:
|
||||
- name: Obtain or renew SSL certificate for {{ cert_domain }}
|
||||
ansible.builtin.shell: |
|
||||
sudo docker compose -f {{ dest_dir }}/srcs/docker-compose.yml run --rm --entrypoint \
|
||||
"certbot certonly --test-cert -d {{ cert_domain }} --webroot --webroot-path /var/www/certbot --agree-tos" certbot
|
||||
args:
|
||||
executable: /bin/bash
|
||||
creates: "{{ dest_dir }}/srcs/nginx/conf/{{ cert_domain }}/fullchain.pem"
|
||||
register: certbot_result
|
||||
changed_when: "'Obtained a new certificate' in certbot_result.stdout or 'renewed' in certbot_result.stdout"
|
||||
when: cert_domain is defined
|
||||
ignore_errors: True
|
||||
|
||||
- name: Restart nginx
|
||||
ansible.builtin.shell: |
|
||||
sudo docker compose -f {{ dest_dir }}/srcs/docker-compose.yml exec nginx nginx -s reload
|
||||
|
||||
- name: Start certbot auto-renew
|
||||
ansible.builtin.shell: |
|
||||
sudo docker compose -f {{ dest_dir }}/srcs/docker-compose.yml up certbot -d -y
|
||||
when: not is_local
|
||||
Reference in New Issue
Block a user