Skip to content

Commit edfc04b

Browse files
Fixes issues:
- Missing variables for dependencies - Update geerlingguy.certbot to 3.0.1 - Add variables foe Acme server - Clean up tasks to reduce redundancy
1 parent 990f8e2 commit edfc04b

File tree

5 files changed

+22
-16
lines changed

5 files changed

+22
-16
lines changed

README.md

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -28,6 +28,14 @@ Your Cloudflare Global API Key, optionally encryped `ansible-vault encrypt_strin
2828

2929
The wildcard domain to create the cert for. For non-wildcard domains I recommend using [geerlingguy.certbot](https://github.com/geerlingguy/ansible-role-certbot)
3030

31+
certbot_cloudflare_acme_server: "{{ certbot_cloudflare_acme_test }}"
32+
33+
or
34+
35+
certbot_cloudflare_acme_server: "{{ certbot_cloudflare_acme_live }}"
36+
37+
Let's Encrypt server to use, defaults to test.
38+
3139

3240
Dependencies
3341
------------

defaults/main.yml

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -9,3 +9,12 @@ certbot_cloudflare_api_key: ''
99

1010
certbot_create_standalone_stop_services: []
1111
certbot_create_if_missing: yes
12+
13+
certbot_dir: /opt/certbot
14+
15+
# Use the ACME v2 staging URI for testing things
16+
certbot_cloudflare_acme_test: "https://acme-staging-v02.api.letsencrypt.org/directory"
17+
# Production ACME v2 API endpoint
18+
certbot_cloudflare_acme_live: "https://acme-v02.api.letsencrypt.org/directory"
19+
20+
certbot_cloudflare_acme_server: "{{ certbot_cloudflare_acme_test }}"

meta/main.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -24,5 +24,5 @@ galaxy_info:
2424
dependencies:
2525
- src: geerlingguy.pip
2626
version: 1.2.2
27-
- src: geerlingguy.certbot
28-
version: 3.0.0
27+
- { role: geerlingguy.certbot, certbot_certs: [], version: 3.0.1 }
28+

tasks/main.yml

Lines changed: 2 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -12,16 +12,6 @@
1212
- python-dev
1313
- python-pycurl
1414

15-
- name: Install pip
16-
include_role:
17-
name: geerlingguy.pip
18-
19-
- name: Install Certbot without Domains.
20-
include_role:
21-
name: geerlingguy.certbot
22-
vars:
23-
certbot_certs: []
24-
2515
- name: check if certbot-dns-cloudflare plugin is installed
2616
shell: certbot plugins | grep dns-cloudflare
2717
register: cf_check
@@ -31,13 +21,15 @@
3121
- name: Install certbot-dns-cloudflare
3222
shell: "cd {{certbot_dir}}/certbot-dns-cloudflare && python setup.py install"
3323
when: cf_check is failed
24+
3425
- name: Create certbot folder - sudouser
3526
file:
3627
path: /etc/letsencrypt
3728
state: directory
3829
owner: root
3930
group: root
4031
mode: 0700
32+
4133
- name: Certbot Template
4234
template:
4335
src: "{{ item.src }}"

templates/letsencrypt_cli.ini.j2

Lines changed: 1 addition & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,3 @@
11
# Let's Encrypt site-wide configuration
22
dns-cloudflare-credentials = /etc/letsencrypt/dnscloudflare.ini
3-
# Use the ACME v2 staging URI for testing things
4-
#server = https://acme-staging-v02.api.letsencrypt.org/directory
5-
# Production ACME v2 API endpoint
6-
server = https://acme-v02.api.letsencrypt.org/directory
3+
server = {{ certbot_cloudflare_acme_server }}

0 commit comments

Comments
 (0)