luke/ansible-roles/certbot-dns-cloudflare/templates, branch main Ansible roles for nth.io infrastructure https://src.nth.io/luke/ansible-roles/atom?h=main 2026-06-30T02:13:59+00:00 certbot: scoped CF API token; gate prosody deploy hook on RENEWED_LINEAGE 2026-06-30T02:13:59+00:00 Luke Hoersten luke@hoersten.org 2026-06-30T02:13:59+00:00 urn:sha1:b15bc8b162e9aacd12c7882ddb3c8cc3ca82189b cred.conf.j2 now emits the single-line dns_cloudflare_api_token form (scoped Cloudflare API Token) instead of the legacy account-wide email + global API key. prosody.sh.j2 deploy hook now no-ops unless $RENEWED_LINEAGE matches the prosody vhost, so unrelated lineage renewals (haskell.social, etracapital.com) no longer report a spurious "Hook reported error code 1 / No certificate for host found". Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> More cert fixes. 2025-05-30T02:34:48+00:00 Luke Hoersten luke@hoersten.org 2025-05-30T02:34:48+00:00 urn:sha1:aa78f093b6d298df46b2b39c62f6bec953bea248 Added certbot dns cloudflare role. Useful for when ISP blocks port 80. 2020-08-15T22:54:09+00:00 Luke Hoersten luke@hoersten.org 2020-08-15T22:54:09+00:00 urn:sha1:33b5c0fd837f13873dffc8ecb2cc91920bac3ef9