2016-02-28 15:19:21 +01:00
|
|
|
---
|
|
|
|
|
|
|
|
|
|
- name: Install dependencies
|
2017-09-09 11:23:30 +02:00
|
|
|
apt: name={{ item }}
|
2016-02-28 15:19:21 +01:00
|
|
|
with_items:
|
2016-04-05 08:42:31 +02:00
|
|
|
- git
|
2016-02-28 15:19:21 +01:00
|
|
|
- python-dateutil
|
2017-09-09 11:23:30 +02:00
|
|
|
- python-openssl
|
2016-02-28 15:19:21 +01:00
|
|
|
- python-yaml
|
2016-04-05 08:42:31 +02:00
|
|
|
|
2016-02-28 15:19:21 +01:00
|
|
|
- name: Install acertmgr
|
2016-10-06 09:27:35 +02:00
|
|
|
git: repo=https://github.com/moepman/acertmgr.git dest=/opt/acertmgr depth=1 version=480337648699cfbe321774dee1d8aa82eb27b626
|
2016-02-28 15:19:21 +01:00
|
|
|
|
|
|
|
|
- name: Create config directories
|
|
|
|
|
file: path={{ item }} state=directory mode=0755
|
|
|
|
|
with_items:
|
|
|
|
|
- /etc/acme
|
|
|
|
|
- /etc/acme/domains.d
|
|
|
|
|
|
|
|
|
|
- name: Configure acertmgr
|
|
|
|
|
template: src=acme.conf.j2 dest=/etc/acme/acme.conf
|
|
|
|
|
|
2016-04-05 08:42:31 +02:00
|
|
|
- name: Create private keys
|
2016-02-28 15:19:21 +01:00
|
|
|
command: openssl genrsa -out {{ item }} 4096 creates={{ item }}
|
|
|
|
|
with_items:
|
|
|
|
|
- /etc/acme/account.key
|
|
|
|
|
- /etc/acme/server.key
|
|
|
|
|
|
2016-04-05 08:42:31 +02:00
|
|
|
- name: Ensure private key permissoins
|
2016-02-28 15:19:21 +01:00
|
|
|
file: path={{ item }} owner=root mode=0400
|
|
|
|
|
with_items:
|
|
|
|
|
- /etc/acme/account.key
|
|
|
|
|
- /etc/acme/server.key
|
2016-04-05 08:42:31 +02:00
|
|
|
|
|
|
|
|
- name: Create challenge directory
|
|
|
|
|
file: path=/var/www/acme-challenge/ owner=root mode=0755 state=directory
|
2016-02-28 15:19:21 +01:00
|
|
|
|
2017-02-28 13:20:48 +01:00
|
|
|
- name: Enable acertmgr cronjob
|
|
|
|
|
cron: name=certmgr special_time=daily job=/opt/acertmgr/acertmgr.py
|
