public-mirrors/NewsBlur
1
0
Fork 0
mirror of https://github.com/samuelclay/NewsBlur.git synced 2025-08-31 21:41:33 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Better handling of letsnecrypt certificate generation, uploading when fails to renew.

Browse source
This commit is contained in:
Samuel Clay 2021-02-18 16:22:30 -05:00
parent 599d8402b0
commit 237ba1a632
1 changed files with 28 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

29
ansible/roles/letsencrypt/tasks/certbot-dns.yml
View file

@ -41,7 +41,7 @@
--dns-{{ dns_plugin }} --dns-{{ dns_plugin }}-propagation-seconds 60 --dns-{{ dns_plugin }} --dns-{{ dns_plugin }}-propagation-seconds 60
--dns-{{ dns_plugin }}-credentials {{ dnsimple_credentials_path }} --dns-{{ dns_plugin }}-credentials {{ dnsimple_credentials_path }}
--server https://acme-v02.api.letsencrypt.org/directory --server https://acme-v02.api.letsencrypt.org/directory
# when: use_dns_plugin|bool when: use_dns_plugin|bool
tags: tags:
- certbot-dns - certbot-dns
@ -101,5 +101,32 @@
dest: "{{ssl_certificate}}" dest: "{{ssl_certificate}}"
- src: /etc/letsencrypt/live/{{ domains_list[0] }}/privkey.pem - src: /etc/letsencrypt/live/{{ domains_list[0] }}/privkey.pem
dest: "{{ssl_certificate_key}}" dest: "{{ssl_certificate_key}}"
ignore_errors: yes
register: linked
tags: tags:
- certbot-dns - certbot-dns
- name: Copy working certificates because letsencrypt failed
become: yes
copy:
src: '{{ item.src }}'
dest: '{{ item.dest }}'
when: not linked
with_items:
- src: /srv/secrets-newsblur/certificates/newsblur.com.crt
dest: /etc/letsencrypt/live/{{ domains_list[0] }}/fullchain.pem
- src: /srv/secrets-newsblur/certificates/newsblur.com.key
dest: /etc/letsencrypt/live/{{ domains_list[0] }}/privkey.pem
- name: Download new certificates to local
become: yes
fetch:
src: '{{ item.dest }}'
dest: '{{ item.src }}'
flat: yes
when: linked
with_items:
- src: /srv/secrets-newsblur/certificates/newsblur.com.crt
dest: /etc/letsencrypt/live/{{ domains_list[0] }}/fullchain.pem
- src: /srv/secrets-newsblur/certificates/newsblur.com.key
dest: /etc/letsencrypt/live/{{ domains_list[0] }}/privkey.pem