feat: add certificate request task

This commit is contained in:
Lenoctambule
2026-04-02 21:32:49 +02:00
parent 6c0d40acf6
commit ceab15c25e
5 changed files with 37 additions and 8 deletions

View File

@@ -0,0 +1,23 @@
- name: Request SSL certifiate to letsencrypt
block:
- name: Obtain or renew SSL certificate for {{ cert_domain }}
ansible.builtin.shell: |
sudo docker compose -f {{ dest_dir }}/srcs/docker-compose.yml run --rm --entrypoint \
"certbot certonly --test-cert -d {{ cert_domain }} --webroot --webroot-path /var/www/certbot --agree-tos" certbot
args:
executable: /bin/bash
creates: "{{ dest_dir }}/srcs/nginx/conf/{{ cert_domain }}/fullchain.pem"
register: certbot_result
changed_when: "'Obtained a new certificate' in certbot_result.stdout or 'renewed' in certbot_result.stdout"
when: cert_domain is defined
ignore_errors: True
- name: Restart nginx
ansible.builtin.shell: |
sudo docker compose -f {{ dest_dir }}/srcs/docker-compose.yml exec nginx nginx -s reload
- name: Start certbot auto-renew
ansible.builtin.shell: |
sudo docker compose -f {{ dest_dir }}/srcs/docker-compose.yml up certbot -d -y
when: not is_local