WarlockFish/fedora-infra_ansible
1
0
Fork 0
mirror of https://pagure.io/fedora-infra/ansible.git synced 2026-03-20 03:57:02 +08:00
Code Issues Packages Projects Releases Wiki Activity

Stab at making letsencrypt not change every run

Browse Source
This commit is contained in:
Kevin Fenzi
2018-06-14 00:48:32 +00:00
parent 77fba2c6ed
commit 7e8decbfcf
1 changed files with 9 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
roles/letsencrypt/tasks/main.yml
View File

@@ -1,7 +1,9 @@
- name: Generate (or renew) the certificate
delegate_to: certgetter01.phx2.fedoraproject.org
command: certbot certonly -n --webroot --webroot-path /var/www/html/ -d {{','.join([site_name] + server_aliases)}}
command: certbot certonly --keep -n --webroot --webroot-path /var/www/html/ -d {{','.join([site_name] + server_aliases)}}
run_once: true
register: certbot_output
changed_when: "not ('no action taken' in certbot_output)"
tags:
- letsencrypt
@@ -10,6 +12,7 @@
delegate_to: certgetter01.phx2.fedoraproject.org
command: cat /etc/letsencrypt/live/{{site_name}}/cert.pem
register: certbot_certificate
when: "not ('no action taken' in certbot_output)"
tags:
- letsencrypt
@@ -17,6 +20,7 @@
delegate_to: certgetter01.phx2.fedoraproject.org
command: cat /etc/letsencrypt/live/{{site_name}}/chain.pem
register: certbot_chain
when: "not ('no action taken' in certbot_output)"
tags:
- letsencrypt
@@ -24,6 +28,7 @@
delegate_to: certgetter01.phx2.fedoraproject.org
command: cat /etc/letsencrypt/live/{{site_name}}/privkey.pem
register: certbot_key
when: "not ('no action taken' in certbot_output)"
tags:
- letsencrypt
@@ -34,6 +39,7 @@
owner=root
group=root
mode=0644
when: "not ('no action taken' in certbot_output)"
notify:
- reload proxyhttpd
tags:
@@ -46,6 +52,7 @@
owner=root
group=root
mode=0644
when: "not ('no action taken' in certbot_output)"
notify:
- reload proxyhttpd
tags:
@@ -58,6 +65,7 @@
owner=root
group=root
mode=0600
when: "not ('no action taken' in certbot_output)"
notify:
- reload proxyhttpd
tags: