Changeset 15568 for main/waeup-ansible

Timestamp:

26 Aug 2019, 13:17:36 (5 years ago)

Author:

uli

Message:

Start/stop nginx in main play, add more domains

The pre- and post-hooks for certbot did not work very well. Instead we now ask
ansible to stop nginx before we request/update a new cert and restart it
afterwards.

The domains added belong to the moved trac instances.

Location:

main/waeup-ansible

Files:

• letsencrypt.yml (modified) (1 diff)
• roles/letsencrypt/tasks/main.yml (modified) (2 diffs)

main/waeup-ansible/letsencrypt.yml

@@ -17 +17 @@
   vars:
     letsencrypt_email: 'uli@gnufix.de'
-    letsencrypt_domains: 'waeup.org,www.waeup.org,h8.waeup.org,svn.waeup.org,trac.waeup.org,iuokada-trac.waeup.org,v1.waeup.org,v2.waeup.org,v3.waeup.org,v4.waeup.org,v5.waeup.org,v6.waeup.org,elearning.waeup.org,gopinkdreams.com,www.gopinkdreams.com'
+    letsencrypt_domains: 'waeup.org,www.waeup.org,h8.waeup.org,svn.waeup.org,trac.waeup.org,aaua-trac.waeup.org,aaue-trac.waeup.org,coewarri-trac.waeup.org,dspg-trac.waeup.org,edopoly-trac.waeup.org, fceokene-trac.waeup.org,iuokada-trac.waeup.org,kwarapoly-trac.waeup.org,moodle-trac.waeup.org,pcn-trac.waeup.org,uniben-trac.waeup.org,wdu-trac.waeup.org,v1.waeup.org,v2.waeup.org,v3.waeup.org,v4.waeup.org,v5.waeup.org,v6.waeup.org,elearning.waeup.org,gopinkdreams.com,www.gopinkdreams.com'
     # set to true if you got some LE certs already, but the list of domains expanded
     letsencrypt_expand_domains: true

main/waeup-ansible/roles/letsencrypt/tasks/main.yml

@@ -32 +32 @@
     creates: '/etc/letsencrypt/accounts/acme-v01.api.letsencrypt.org/directory/*/private_key.json'
 
+- name: "stop webserver"
+  become: yes
+  service:
+      name: nginx
+      state: stopped
+
 # For first time creation of certs. Later on use the below task or renewal
 - name: "create initial certs"
@@ -45 +51 @@
   when: letsencrypt_expand_domains
 
+- name: "start webserver"
+  become: yes
+  service:
+      name: nginx
+      state: restarted
+
 # Cron task for renewal is installed automatically by the Ubuntu package