wtanaka / ansible-role-certbot

Ansible role to install certbot

wtanaka.certbot

Installs certbot command line tools for the letsencrypt certificate authority

Example Playbook

- hosts: servers
  roles:
     - role: wtanaka.certbot
       # Read the TOS then uncomment this
       # letsencrypt_agree_tos: --agree-tos
       letsencrypt_email: [email protected]
       letsencrypt_webroot: /var/www/html
       # Uncomment to renew on every run (by default waits till 30
       # days till expiration)
       # letsencrypt_renew_by_default: --renew-by-default
       letsencrypt_domains:
       - wtanaka.com
       - www.wtanaka.com

Or you can include just the role, and configure it in

PLAYBOOK
- hosts: servers
  roles:
     - wtanaka.certbot

HOST_VARS file:

# Read the TOS then uncomment this
# letsencrypt_agree_tos: --agree-tos
letsencrypt_email: [email protected]
letsencrypt_webroot: /var/www/html
# Uncomment to renew on every run (by default waits till 30
# days till expiration)
# letsencrypt_renew_by_default: --renew-by-default
letsencrypt_domains:
- wtanaka.com
- www.wtanaka.com

letsencrypt_should_shortcircuit

Default: True

When True, this role short-circuits itself if {{letsencrypt_binary}} is already in the path

letsencrypt_fake_key

Set to True in order to disable executing certbot and install a self-signed key in each of the letsencrypt_domains directories. Nothing will be installed if letsencrypt_domains is empty

For example, this could be used in an integration test environment or in a testing or staging environment.

letsencrypt_domains

This is a list of domain names to pass to certbot.

Example:

letsencrypt_domains:
- wtanaka.com
- www.wtanaka.com

Setting this to an empty list will disable executing certbot:

letsencrypt_domains: []

letsencrypt_reload_webserver_action

Set this to the service that, when reloaded, will re-read your webserver configuration files.

For example:

letsencrypt_reload_service: nginx

The full set of configuration options available are visible in defaults/main.yml

License

GPLv2

Author Information

http://wtanaka.com/