ansible/roles/reverse_proxy_http/tasks/main.yml

59 lines
1.6 KiB
YAML
Raw Normal View History

2020-10-12 09:32:59 +02:00
---
2020-10-12 23:58:33 +02:00
- name: Install certbot
apt:
update_cache: true
name:
- certbot
- python3-certbot-nginx
state: latest
2020-10-13 01:25:02 +02:00
- name: Ensure the cert directory exists
file:
path: /etc/nginx/certs
state: directory
- name: Copy snippets
template:
src: "nginx/snippets/{{ item }}"
dest: "/etc/nginx/snippets/{{ item }}"
loop:
- options-proxypass.conf
- connection_upgrade.conf # fix some nginx bug
2020-10-13 01:25:02 +02:00
2020-10-12 23:02:15 +02:00
- name: Copy reverse proxy sites
template:
src: "nginx/sites-available/reverse_proxy"
dest: "/etc/nginx/sites-available/{{ item.from }}"
loop: "{{ reverse_proxy_sites }}"
2020-10-12 23:58:33 +02:00
- name: Activate sites
file:
src: "/etc/nginx/sites-available/{{ item.from }}"
dest: "/etc/nginx/sites-enabled/{{ item.from }}"
state: link
force: yes
loop: "{{ reverse_proxy_sites }}"
- name: Generate Certificate for Domains
shell: certbot certonly --standalone -d {{ item.from }} -m {{ certificate_email }} --noninteractive --agree-tos --redirect --pre-hook "sudo systemctl stop nginx" --post-hook "sudo systemctl start nginx"
args:
creates: "/etc/letsencrypt/live/{{ item.from }}/cert.pem"
2020-10-13 01:25:02 +02:00
loop: "{{ reverse_proxy_sites }}"
- name: Copy certificates
file:
2021-01-27 20:14:40 +01:00
src: "/etc/letsencrypt/live/{{ item.from }}/fullchain.pem"
dest: "/etc/nginx/certs/{{ item.from }}.crt"
state: link
force: yes
loop: "{{ reverse_proxy_sites }}"
- name: Copy certificate keys
file:
src: "/etc/letsencrypt/live/{{ item.from }}/privkey.pem"
dest: "/etc/nginx/certs/{{ item.from }}.key"
state: link
force: yes
loop: "{{ reverse_proxy_sites }}"
notify: Reload nginx