Last change
on this file since 14918 was
14911,
checked in by uli, 7 years ago
|
Append missing domains in letsencrypt playbook.
Adding domains in the h8 cert was really a one-liner run from the local
machine.
$ ansible-playbook -i h8.waeup.org, -b letsencrypt.yml
It took about five seconds and afterwards the SSL-cert on h8 was extended by
another two domains. In that time the cert was requested, signed, and
installed. Wow!
|
File size:
764 bytes
|
Line | |
---|
1 | --- |
---|
2 | # This ansible-playbook installs letsencrypt certs |
---|
3 | # |
---|
4 | # What it does: |
---|
5 | # - registers LE account |
---|
6 | # - requests/creates first-time certificates |
---|
7 | # - requests new certs if list of domains changed |
---|
8 | ## |
---|
9 | # REVIEW/EDIT THE VARS BELOW BEFORE RUNNING! |
---|
10 | # ALL DOMAINS MUST BE REGISTERED FOR TARGET HOST IN DNS! |
---|
11 | # |
---|
12 | # It will normally be run like this: |
---|
13 | # |
---|
14 | # ansible-playbook -b -i h8.waeup.org, letsencrypt.yml |
---|
15 | # |
---|
16 | - hosts: h8.waeup.org |
---|
17 | vars: |
---|
18 | letsencrypt_email: 'uli@gnufix.de' |
---|
19 | letsencrypt_domains: 'h8.waeup.org,v2.waeup.org,v3.waeup.org,v4.waeup.org,v5.waeup.org,v6.waeup.org,gopinkdreams.com,www.gopinkdreams.com' |
---|
20 | # set to true if you got some LE certs already, but the list of domains expanded |
---|
21 | letsencrypt_expand_domains: true |
---|
22 | roles: |
---|
23 | - letsencrypt |
---|
Note: See
TracBrowser for help on using the repository browser.