certbot-dns-cloudflare/tasks/main.yaml
changeset 227 2e0366f2dcbe
parent 174 431c6d5e5dd4
equal deleted inserted replaced
226:ce33bf94045f 227:2e0366f2dcbe
    11     dest: "/etc/letsencrypt/cred.conf"
    11     dest: "/etc/letsencrypt/cred.conf"
    12     mode: "0600"
    12     mode: "0600"
    13     owner: "root"
    13     owner: "root"
    14     group: "root"
    14     group: "root"
    15 
    15 
       
    16 - name: make renewal dir
       
    17   become: yes
       
    18   file:
       
    19     path: "/etc/letsencrypt/renewal/"
       
    20     state: "directory"
       
    21 
    16 - name: configure renewal
    22 - name: configure renewal
    17   become: yes
    23   become: yes
    18   template:
    24   template:
    19     src: "{{certbot_dns_cloudflare_conf}}"
    25     src: "{{certbot_dns_cloudflare_conf}}"
    20     dest: "/etc/letsencrypt/renewal/{{certbot_dns_cloudflare_domain}}.conf"
    26     dest: "/etc/letsencrypt/renewal/{{certbot_dns_cloudflare_domain}}.conf"
    22     owner: "root"
    28     owner: "root"
    23     group: "root"
    29     group: "root"
    24 
    30 
    25 - name: check if cert exists
    31 - name: check if cert exists
    26   become: yes
    32   become: yes
    27   stat: path="/etc/letsencrypt/live/{{certbot_dns_cloudflare_domain}}/cert.pem"
    33   stat: path="/etc/letsencrypt/live/{{certbot_dns_cloudflare_domain}}-0001/cert.pem"
    28   register: cert
    34   register: cert
    29 
    35 
    30 - name: run certbot
    36 - name: run certbot
    31   become: yes
    37   become: yes
    32   command: "certbot certonly -n --dns-cloudflare --dns-cloudflare-credentials /etc/letsencrypt/cred.conf -d {{certbot_dns_cloudflare_domain}}"
    38   command: "certbot certonly -n --agree-tos --email {{certbot_dns_cloudflare_email}} --dns-cloudflare --dns-cloudflare-credentials /etc/letsencrypt/cred.conf -d {{certbot_dns_cloudflare_domain}} -d \"*.{{certbot_dns_cloudflare_domain}}\""
    33   when: not cert.stat.exists
    39   when: not cert.stat.exists
    34   changed_when: false
    40   changed_when: false