source: main/waeup-ansible/letsencrypt.yml @ 15800

Last change on this file since 15800 was 15568, checked in by uli, 5 years ago

Start/stop nginx in main play, add more domains

The pre- and post-hooks for certbot did not work very well. Instead we now ask
ansible to stop nginx before we request/update a new cert and restart it
afterwards.

The domains added belong to the moved trac instances.
File size: 1.1 KB
RevLine 
[14706]1---
2# This ansible-playbook installs letsencrypt certs
3#
4# What it does:
5#   - registers LE account
6#   - requests/creates first-time certificates
7#   - requests new certs if list of domains changed
8##
9# REVIEW/EDIT THE VARS BELOW BEFORE RUNNING!
10# ALL DOMAINS MUST BE REGISTERED FOR TARGET HOST IN DNS!
11#
12# It will normally be run like this:
13#
14#  ansible-playbook -b -i h8.waeup.org, letsencrypt.yml
15#
16- hosts: h8.waeup.org
17  vars:
18    letsencrypt_email: 'uli@gnufix.de'
[15568]19    letsencrypt_domains: 'waeup.org,www.waeup.org,h8.waeup.org,svn.waeup.org,trac.waeup.org,aaua-trac.waeup.org,aaue-trac.waeup.org,coewarri-trac.waeup.org,dspg-trac.waeup.org,edopoly-trac.waeup.org, fceokene-trac.waeup.org,iuokada-trac.waeup.org,kwarapoly-trac.waeup.org,moodle-trac.waeup.org,pcn-trac.waeup.org,uniben-trac.waeup.org,wdu-trac.waeup.org,v1.waeup.org,v2.waeup.org,v3.waeup.org,v4.waeup.org,v5.waeup.org,v6.waeup.org,elearning.waeup.org,gopinkdreams.com,www.gopinkdreams.com'
[14706]20    # set to true if you got some LE certs already, but the list of domains expanded
[14911]21    letsencrypt_expand_domains: true
[14706]22  roles:
23    - letsencrypt
Note: See TracBrowser for help on using the repository browser.