38 lines
915 B
YAML
38 lines
915 B
YAML
---
|
|
- name: Assert secrets have been configured.
|
|
ansible.builtin.assert:
|
|
that:
|
|
- acme_domains is defined
|
|
- acme_email is defined
|
|
- acme_email != ''
|
|
fail_msg: "FAILED: No ACME variables have been configured for this host."
|
|
# no_log: true
|
|
|
|
- name: Set up the ACME system user and group.
|
|
import_tasks: setup-user.yml
|
|
become: true
|
|
|
|
- name: Run lego looped task to order or renew certificates for all ACME domains.
|
|
include_tasks:
|
|
file: lego.yml
|
|
apply:
|
|
become: false
|
|
loop: "{{ acme_domains }}"
|
|
loop_control:
|
|
loop_var: acme_domain
|
|
tags: lego
|
|
|
|
- name: Loop through the domain list (again) to copy certs and configure nginx for each ACME domain
|
|
include_tasks:
|
|
file: certificates.yml
|
|
apply:
|
|
become: true
|
|
loop: "{{ acme_domains }}"
|
|
loop_control:
|
|
loop_var: acme_domain
|
|
tags: nginx
|
|
|
|
- import_tasks: dhparams.yml
|
|
become: true
|
|
tags: dhparams
|