Post renewal hook for certbot to reload dovecot and postfix

3 years ago · 256d2d5df4
parent 43053e57f9
commit 256d2d5df4
2 changed files with 19 additions and 0 deletions
--- a/roles/mail_certificates/letsencrypt/renewal-hooks/reload-mail-services.sh.j2
+++ b/roles/mail_certificates/letsencrypt/renewal-hooks/reload-mail-services.sh.j2
@ -0,0 +1,6 @@
+#!/bin/sh
+{{ ansible_manged | comment }}
+# Reload Postcot and Dovecot after certificates are (re)generated
+
+systemctl reload postfix
+systemctl reload dovecot
--- a/roles/mail_certificates/tasks/main.yml
+++ b/roles/mail_certificates/tasks/main.yml
@ -22,3 +22,16 @@
    dest: "/etc/letsencrypt/conf.d/{{ certbot.certname }}.ini"
    mode: 0644
  notify: Generate certificates
+
+- name: Make sure let's encrypt renewal-hooks exists
+  file:
+    path: /etc/letsencrypt/renewal-hooks/deploy
+    state: directory
+
+- name: Reload Postfix and Dovecot after certificate renewal
+  template:
+    src: letsencrypt/renewal-hooks/deploy/reload-mail-services.sh.j2
+    dest: /etc/letsencrypt/renewal-hooks/deploy/reload-mail-services.sh
+    mode: 0755
+
+# TODO: add motd