summaryrefslogtreecommitdiff
path: root/roles/nginx
diff options
context:
space:
mode:
authorChristian Pointner <equinox@spreadspace.org>2023-08-17 00:23:01 +0200
committerChristian Pointner <equinox@spreadspace.org>2023-08-20 22:12:03 +0200
commit775492cc28346ea86396a947e1371b8aa0784380 (patch)
treee7c0dfd895adcec398e5bf6cf685c9e262a6587e /roles/nginx
parentuacme roles almost done (diff)
revamp x509 service reloading
Diffstat (limited to 'roles/nginx')
-rw-r--r--roles/nginx/vhost/tasks/main.yml16
1 files changed, 9 insertions, 7 deletions
diff --git a/roles/nginx/vhost/tasks/main.yml b/roles/nginx/vhost/tasks/main.yml
index 55544733..2c1f0f29 100644
--- a/roles/nginx/vhost/tasks/main.yml
+++ b/roles/nginx/vhost/tasks/main.yml
@@ -1,13 +1,14 @@
---
- name: ensure certificate exists (fake it, until you make it)
when: "'tls' in nginx_vhost"
- include_role:
- name: "x509/{{ nginx_vhost.tls.certificate_provider }}/cert/prepare"
- public: true
vars:
x509_certificate_name: "{{ nginx_vhost.name }}"
x509_certificate_hostnames: "{{ nginx_vhost.hostnames }}"
- x509_notify_on_change: reload nginx
+ x509_certificate_reload_services:
+ - nginx
+ include_role:
+ name: "x509/{{ nginx_vhost.tls.certificate_provider }}/cert/prepare"
+ public: true
- name: install nginx configs from template
when: "'template' in nginx_vhost"
@@ -39,9 +40,10 @@
meta: flush_handlers
- name: actually request the certificate
- include_role:
- name: "x509/{{ nginx_vhost.tls.certificate_provider }}/cert/finalize"
vars:
x509_certificate_name: "{{ nginx_vhost.name }}"
x509_certificate_hostnames: "{{ nginx_vhost.hostnames }}"
- x509_notify_on_change: reload nginx
+ x509_certificate_reload_services:
+ - nginx
+ include_role:
+ name: "x509/{{ nginx_vhost.tls.certificate_provider }}/cert/finalize"