Changeset 15568 for main/waeup-ansible/roles/letsencrypt/tasks

Timestamp:

26 Aug 2019, 13:17:36 (5 years ago)

Author:

uli

Message:

Start/stop nginx in main play, add more domains

The pre- and post-hooks for certbot did not work very well. Instead we now ask
ansible to stop nginx before we request/update a new cert and restart it
afterwards.

The domains added belong to the moved trac instances.

File:

• main/waeup-ansible/roles/letsencrypt/tasks/main.yml (modified) (2 diffs)

main/waeup-ansible/roles/letsencrypt/tasks/main.yml

@@ -32 +32 @@
     creates: '/etc/letsencrypt/accounts/acme-v01.api.letsencrypt.org/directory/*/private_key.json'
 
+- name: "stop webserver"
+  become: yes
+  service:
+      name: nginx
+      state: stopped
+
 # For first time creation of certs. Later on use the below task or renewal
 - name: "create initial certs"
@@ -45 +51 @@
   when: letsencrypt_expand_domains
 
+- name: "start webserver"
+  become: yes
+  service:
+      name: nginx
+      state: restarted
+
 # Cron task for renewal is installed automatically by the Ubuntu package