aboutsummaryrefslogtreecommitdiffstatshomepage
path: root/roles/letsencrypt/tasks/main.yml
diff options
context:
space:
mode:
authorEgor Tensin <Egor.Tensin@gmail.com>2023-08-04 12:24:07 +0200
committerEgor Tensin <Egor.Tensin@gmail.com>2023-08-04 12:24:07 +0200
commit579ab58b48e6356954b1974f66f28abfaba5757c (patch)
tree0f4be34dbce7ea85a98023a1d06a9ae7889794ac /roles/letsencrypt/tasks/main.yml
parentimport workspace role (diff)
downloadinfra-ansible-579ab58b48e6356954b1974f66f28abfaba5757c.tar.gz
infra-ansible-579ab58b48e6356954b1974f66f28abfaba5757c.zip
import letsencrypt role
Diffstat (limited to '')
-rw-r--r--roles/letsencrypt/tasks/main.yml61
1 files changed, 61 insertions, 0 deletions
diff --git a/roles/letsencrypt/tasks/main.yml b/roles/letsencrypt/tasks/main.yml
new file mode 100644
index 0000000..814c549
--- /dev/null
+++ b/roles/letsencrypt/tasks/main.yml
@@ -0,0 +1,61 @@
+- name: Install snapd
+ become: true
+ ansible.builtin.apt:
+ install_recommends: false
+ name: snapd
+
+- name: Install Certbot
+ become: true
+ community.general.snap:
+ classic: true
+ name: certbot
+
+- name: Confirm plugin containment level
+ become: true
+ ansible.builtin.command: snap set certbot trust-plugin-with-root=ok
+
+- name: Install Certbot DigitalOcean plugin
+ become: true
+ community.general.snap:
+ name: certbot-dns-digitalocean
+
+- name: Create Certbot symlink in /usr/bin
+ become: true
+ ansible.builtin.file:
+ src: /snap/bin/certbot
+ dest: /usr/bin/certbot
+ state: link
+
+- name: Configure Certbot DigitalOcean plugin
+ become: true
+ block:
+ - name: Prompt for token
+ ansible.builtin.pause:
+ prompt: |
+ Enter your API token:
+ echo: false
+ register: digitalocean_token
+ when:
+ - lookup('env', 'DIGITALOCEAN_TOKEN') | length <= 0
+
+ - name: Set the token as a fact
+ ansible.builtin.set_fact:
+ digitalocean_token: "{{ digitalocean_.user_input | default(lookup('env', 'DIGITALOCEAN_TOKEN')) }}"
+
+ - name: Configure certbot.ini
+ ansible.builtin.template:
+ src: certbot.ini
+ dest: '{{ certbot_ini }}'
+ owner: root
+ group: root
+ mode: '600'
+
+- name: Create /etc/letsencrypt
+ become: true
+ ansible.builtin.command: certbot certificates
+ args:
+ creates: /etc/letsencrypt
+
+- name: Update certificates
+ ansible.builtin.include_tasks: domain.yml
+ loop: '{{ letsencrypt_domains }}'