https://github.com/wtanaka/ansible-role-certbot
Ansible role to install certbot
https://github.com/wtanaka/ansible-role-certbot
ansible ansible-galaxy ansible-role ansible-roles certbot galaxy https letsencrypt letsencrypt-utils security
Last synced: 3 months ago
JSON representation
Ansible role to install certbot
- Host: GitHub
- URL: https://github.com/wtanaka/ansible-role-certbot
- Owner: wtanaka
- Created: 2016-10-22T08:37:22.000Z (almost 9 years ago)
- Default Branch: master
- Last Pushed: 2019-09-24T18:50:30.000Z (about 6 years ago)
- Last Synced: 2025-04-10T21:36:48.438Z (6 months ago)
- Topics: ansible, ansible-galaxy, ansible-role, ansible-roles, certbot, galaxy, https, letsencrypt, letsencrypt-utils, security
- Size: 27.3 KB
- Stars: 5
- Watchers: 1
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
[](https://travis-ci.org/wtanaka/ansible-role-certbot)
[](https://circleci.com/gh/wtanaka/ansible-role-certbot)
wtanaka.certbot
===============
Installs certbot command line tools for the letsencrypt certificate
authority
Example Playbook
----------------
- hosts: servers
roles:
- role: wtanaka.certbot
# Read the TOS then uncomment this
# letsencrypt_agree_tos: --agree-tos
letsencrypt_email: example@example.com
letsencrypt_webroot: /var/www/html
# Uncomment to renew on every run (by default waits till 30
# days till expiration)
# letsencrypt_renew_by_default: --renew-by-default
letsencrypt_domains:
- wtanaka.com
- www.wtanaka.com
Or you can include just the role, and configure it in
PLAYBOOK
- hosts: servers
roles:
- wtanaka.certbot
HOST_VARS file:
# Read the TOS then uncomment this
# letsencrypt_agree_tos: --agree-tos
letsencrypt_email: example@example.com
letsencrypt_webroot: /var/www/html
# Uncomment to renew on every run (by default waits till 30
# days till expiration)
# letsencrypt_renew_by_default: --renew-by-default
letsencrypt_domains:
- wtanaka.com
- www.wtanaka.com
### `letsencrypt_should_shortcircuit`
Default: True
When True, this role short-circuits itself if
``{{letsencrypt_binary}}`` is already in the path
### `letsencrypt_fake_key`
Set to `True` in order to disable executing certbot and install a
self-signed key in each of the `letsencrypt_domains` directories.
Nothing will be installed if `letsencrypt_domains` is empty
For example, this could be used in an integration test environment or
in a testing or staging environment.
### `letsencrypt_domains`
This is a list of domain names to pass to certbot.
Example:
```
letsencrypt_domains:
- wtanaka.com
- www.wtanaka.com
```
Setting this to an empty list will disable executing certbot:
```
letsencrypt_domains: []
```
### `letsencrypt_reload_webserver_action`
Set this to the service that, when reloaded, will re-read your
webserver configuration files.
For example:
```
letsencrypt_reload_service: nginx
```
The full set of configuration options available are visible in
[defaults/main.yml](defaults/main.yml)
License
-------
GPLv2
Author Information
------------------
http://wtanaka.com/