blob: 220da2e7faca36960fec125efdef1753416f00e2 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
|
---
- name: check if acmetool package is new enough
debug:
msg: "Check distribution_release"
failed_when: (ansible_distribution == 'Debian' and ansible_distribution_major_version < 9) or (ansible_distribution == 'Ubuntu' and ansible_distribution_major_version < 17) or (ansible_distribution != 'Debian' and ansible_distribution != 'Ubuntu')
- name: install needed packages
apt:
name:
- acmetool
- ssl-cert
state: present
- name: create initial directory structure
command: acmetool --batch
args:
creates: /var/lib/acme/conf
- name: create acmetool response file
template:
src: responses.j2
dest: /var/lib/acme/conf/responses
- name: create non-standard acmetool webroot path
file:
name: "{{ acmetool_challenge_webroot_path }}"
state: directory
when: acmetool_challenge_webroot_path is defined
- name: run quickstart to create account and default target configuration
command: acmetool --batch quickstart
environment:
http_proxy: "{{ acmetool_http_proxy | default(omit) }}"
https_proxy: "{{ acmetool_https_proxy | default(omit) }}"
args:
creates: /var/lib/acme/conf/target
- name: create directory for snakeoil cert
file:
path: /etc/ssl/acmetool-snakeoil
state: directory
- name: create symlinks to snakeoil cert/key
file:
src: "/etc/ssl/{{ item.src }}"
dest: "/etc/ssl/acmetool-snakeoil/{{ item.dest }}"
state: link
with_items:
- src: certs/ssl-cert-snakeoil.pem
dest: cert
- src: certs/ssl-cert-snakeoil.pem
dest: fullchain
- src: private/ssl-cert-snakeoil.key
dest: privkey
- name: create additional files for snakeoil cert
copy:
content: "{{ item.content }}"
dest: "/etc/ssl/acmetool-snakeoil/{{ item.dest }}"
with_items:
- content: ""
dest: chain
- content: "http://example.com/nonexistent\n"
dest: url
- name: install service reload configuration
template:
src: acme-reload.j2
dest: /etc/default/acme-reload
owner: root
group: root
mode: 0644
when: acmetool_reload_services is defined
- name: create system unit snippet directory
file:
path: /etc/systemd/system/acmetool.service.d/
state: directory
- name: install systemd unit snippet
template:
src: systemd-override.conf.j2
dest: /etc/systemd/system/acmetool.service.d/override.conf
- name: enable/start systemd timer for acmetool
systemd:
name: acmetool.timer
state: started
enabled: yes
daemon_reload: yes
|
