Skip to content
This repository has been archived by the owner on Feb 3, 2019. It is now read-only.

CorbanR/letsencrypt

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

15 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

letsencrypt(DEPRECATED)

DEPRECATED see https://docs.ansible.com/ansible/latest/modules/letsencrypt_module.html

Installs letsencrypt and generates/installs a certificate.

Generate Cert

In order to generate a certificate port 443 needs to be open and the following variables are required.

Required Variables:

  • subdomain:
  • domain:
  • letsencrypt_email:

Optional Variables:

  • server_type: #apache or nginx. Will use the webserver of your choosing to verify the request (Standalone).
  • revoke: #Set to yes if you want to revoke the certificate
  • force_renewal: #Set to yes to force certificate renewal.

Example:

- hosts: letsencrypt
  remote_user: <your_user>
  become: yes
  vars:
    subdomain: www
    domain: example.com
    letsencrypt_email: [email protected]
  roles:
    - CorbanR.letsencrypt

Defaults

  • authenticator: "standalone"
  • certificate_path: /etc/letsencrypt/live
  • letsencrypt_bin: "/root/.local/share/letsencrypt/bin/letsencrypt"
  • letsencrypt_gitlocation: /opt/letsencrypt
  • letsencrypt_server: https://acme-staging.api.letsencrypt.org/directory
  • renew_days: 10
  • rsa_key_size: 2048
  • ssl_days_remaining: "{{ renew_days }}"
  • standalone_supported_challenges: "tls-sni-01"
  • webroot_path: ""

To Do

  • Multiple certificate logic
  • Add logic for authenticator type != "standalone"
  • Add cron job to check certificate expiration and auto renew.