This commit is contained in:
muppeth 2024-03-09 00:59:40 +01:00
parent acfd101148
commit 9c585c643a
Signed by: muppeth
GPG Key ID: 0EBC7B9848D04031
1 changed files with 21 additions and 10 deletions

View File

@ -3,21 +3,13 @@
- name: '[COPY SSL] - Fetch Certificates'
synchronize:
mode: pull
src: '/etc/letsencrypt/'
src: '/etc/letsencrypt/live'
dest: '/etc/ansible/ssl/{{ inventory_hostname }}'
copy_links: 'true'
when: install_letsencrypt == 'true'
notify:
- reload nginx
- name: '[COPY CERTS] - Copy certs archive to webservers'
synchronize:
src: '/etc/ansible/ssl/{{ item.server }}/live/{{ item.domain }}'
dest: '/etc/letsencrypt/live/{{ item.domain }}'
when: letsencrypt_copy_certs == 'true'
loop: '{{ letsencrypt_copy_cert_from }}'
notify:
- reload {{ item.service }}
- name: '[COPY CERTS] - Make sure direcotry permissions to cert path is correct'
file:
path: '/etc/letsencrypt/live/{{ item.domain }}'
@ -26,3 +18,22 @@
group: '{{ item.group }}'
when: letsencrypt_copy_certs == 'true'
loop: '{{ letsencrypt_copy_cert_from }}'
- name: '[COPY CERTS] - Copy certs archive to webservers'
synchronize:
src: '/etc/ansible/ssl/{{ item.server }}/live/{{ item.domain }}'
dest: '/etc/letsencrypt/live/'
copy_links: 'true'
when: letsencrypt_copy_certs == 'true'
loop: '{{ letsencrypt_copy_cert_from }}'
notify:
- reload {{ item.service }}
- name: '[COPY CERTS] - Make sure direcotry permissions to cert path is correct'
file:
dest: '/etc/letsencrypt/live/{{ item.domain }}'
owner: '{{ item.owner }}'
group: '{{ item.group }}'
recurse: 'yes'
when: letsencrypt_copy_certs == 'true'
loop: '{{ letsencrypt_copy_cert_from }}'