This commit is contained in:
muppeth 2024-03-09 00:59:40 +01:00
parent acfd101148
commit 9c585c643a
Signed by: muppeth
GPG key ID: 0EBC7B9848D04031

View file

@ -3,21 +3,13 @@
- name: '[COPY SSL] - Fetch Certificates' - name: '[COPY SSL] - Fetch Certificates'
synchronize: synchronize:
mode: pull mode: pull
src: '/etc/letsencrypt/' src: '/etc/letsencrypt/live'
dest: '/etc/ansible/ssl/{{ inventory_hostname }}' dest: '/etc/ansible/ssl/{{ inventory_hostname }}'
copy_links: 'true'
when: install_letsencrypt == 'true' when: install_letsencrypt == 'true'
notify: notify:
- reload nginx - reload nginx
- name: '[COPY CERTS] - Copy certs archive to webservers'
synchronize:
src: '/etc/ansible/ssl/{{ item.server }}/live/{{ item.domain }}'
dest: '/etc/letsencrypt/live/{{ item.domain }}'
when: letsencrypt_copy_certs == 'true'
loop: '{{ letsencrypt_copy_cert_from }}'
notify:
- reload {{ item.service }}
- name: '[COPY CERTS] - Make sure direcotry permissions to cert path is correct' - name: '[COPY CERTS] - Make sure direcotry permissions to cert path is correct'
file: file:
path: '/etc/letsencrypt/live/{{ item.domain }}' path: '/etc/letsencrypt/live/{{ item.domain }}'
@ -26,3 +18,22 @@
group: '{{ item.group }}' group: '{{ item.group }}'
when: letsencrypt_copy_certs == 'true' when: letsencrypt_copy_certs == 'true'
loop: '{{ letsencrypt_copy_cert_from }}' loop: '{{ letsencrypt_copy_cert_from }}'
- name: '[COPY CERTS] - Copy certs archive to webservers'
synchronize:
src: '/etc/ansible/ssl/{{ item.server }}/live/{{ item.domain }}'
dest: '/etc/letsencrypt/live/'
copy_links: 'true'
when: letsencrypt_copy_certs == 'true'
loop: '{{ letsencrypt_copy_cert_from }}'
notify:
- reload {{ item.service }}
- name: '[COPY CERTS] - Make sure direcotry permissions to cert path is correct'
file:
dest: '/etc/letsencrypt/live/{{ item.domain }}'
owner: '{{ item.owner }}'
group: '{{ item.group }}'
recurse: 'yes'
when: letsencrypt_copy_certs == 'true'
loop: '{{ letsencrypt_copy_cert_from }}'