mirror of
https://pagure.io/fedora-infra/ansible.git
synced 2026-05-02 06:20:26 +08:00
3cc27430b6
We need two-phase configuration for Let's Encrypt: 1. initialize; the letsencrypt automation, this is happening only once per VM (when it is spawned) 2. periodic; using certbot-renew.timer. Both those phases are now wrapped into copr/certbot role. Phase 1. needs to be done before the web-server is started (so include the role on appropriate place in the playbook), so we can do 'certbot --standalone' (bounds to port 80). Phase 2. is accomplished using the running web-server, using 'certbot renew --webroot'. If (and only if) the certificate is renewed, web server needs to be restarted (and lighttpd needs to have post-processed certificate format). So we also need the deploy hook script in hand (two actually, lighttpd/httpd) so 'certbot renew' automatically does what we expect it to do.
Fedora Infrastructure
Welcome! This is the Fedora Infrastructure Pagure project.
issues against this project are for issues in Fedora Infrastructure.
git repo of this project is misc scripts and tools for Fedora
If you are looking for the Fedora Infrastructure ansible repo, that is not here, look at:
https://infrastructure.fedoraproject.org/cgit/ansible.git/
If you would like to help out with Fedora Infrastructure, see:
https://fedoraproject.org/wiki/Infrastructure/GettingStarted and https://fedoraproject.org/wiki/Infrastructure_Apprentice