https://github.com/zerwes/ansible-role-certbot

letsencrypt.org certificate handling using certbot
https://github.com/zerwes/ansible-role-certbot

ansible ansible-role certbot certificate letsencrypt open-source

Last synced: 3 months ago
JSON representation

letsencrypt.org certificate handling using certbot

• Host: GitHub
• URL: https://github.com/zerwes/ansible-role-certbot
• Owner: zerwes
• License: gpl-3.0
• Created: 2018-02-08T04:56:49.000Z (over 8 years ago)
• Default Branch: master
• Last Pushed: 2025-03-05T18:23:38.000Z (over 1 year ago)
• Last Synced: 2025-03-16T20:23:23.813Z (over 1 year ago)
• Topics: ansible, ansible-role, certbot, certificate, letsencrypt, open-source
• Language: Shell
• Size: 37.1 KB
• Stars: 0
• Watchers: 1
• Forks: 1
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

          
[![License: GPL v3](https://img.shields.io/badge/License-GPL%20v3-blue.svg)](http://www.gnu.org/licenses/gpl-3.0)

ansible-role-certbot

====================

Will just generate letsencrypt.org certificates using certbot and webroot on debian-based systems.

It will not configure apache etc.

As certbot requires a working apache in order to validate domains, I use::

	  roles:

	    - { role: geerlingguy.apache, tags: apache, apache_ignore_missing_ssl_certificate: false } # first run to configure apache http

	    - { role: certbot, tags: certbot }

	    - { role: geerlingguy.apache, tags: apache, apache_ignore_missing_ssl_certificate: true } # second run after cert creation / renewal

Vars

----

	certbot__email: test@nosuchdomain.xyz

	# map of cert name => map webroot => list of names

	# for each maincertname a cert will be generated using the webroot map => domainname as names

	certbot__certs:

	  dom1.tld1:

	    /srv/www/dom1:

	      - dom1.tld1

	      - a.dom1.tld1

	      - b.dom1.tld1

	      - a.dom2.tld2

	    /srv/www/dom3

	      - dom3.tld3

	  dom2.tld2:

	    /srv/www/dom2

	      - dom2.tld2

more VARs can be found in [defaults/main.yml](defaults/main.yml)