certmgr: update to latest version, adjust config

This commit is contained in:
Markus 2019-02-11 19:36:35 +01:00
parent 06760bf9f7
commit fa7fec4a93
2 changed files with 3 additions and 21 deletions

View File

@ -4,12 +4,12 @@
apt: name={{ item }} apt: name={{ item }}
with_items: with_items:
- git - git
- python-dateutil - python-cryptography
- python-openssl - python-dnspython
- python-yaml - python-yaml
- name: Install acertmgr - name: Install acertmgr
git: repo=https://github.com/moepman/acertmgr.git dest=/opt/acertmgr depth=1 version=017f55f57cb77628061b6a5f4236055c2e4d5f02 git: repo=https://github.com/moepman/acertmgr.git dest=/opt/acertmgr depth=1 version=02036f56173e3a87173fed33103918c7c5279c5a
- name: Create config directories - name: Create config directories
file: path={{ item }} state=directory mode=0755 file: path={{ item }} state=directory mode=0755
@ -20,21 +20,6 @@
- name: Configure acertmgr - name: Configure acertmgr
template: src=acme.conf.j2 dest=/etc/acme/acme.conf template: src=acme.conf.j2 dest=/etc/acme/acme.conf
- name: Create private keys
command: openssl genrsa -out {{ item }} 4096 creates={{ item }}
with_items:
- /etc/acme/account.key
- /etc/acme/server.key
- name: Ensure private key permissoins
file: path={{ item }} owner=root mode=0400
with_items:
- /etc/acme/account.key
- /etc/acme/server.key
- name: Download Lets Encrypt CA certificate
get_url: url=https://letsencrypt.org/certs/lets-encrypt-x3-cross-signed.pem dest=/etc/acme/lets-encrypt-x3-cross-signed.pem
- name: Create challenge directory - name: Create challenge directory
file: path=/var/www/acme-challenge/ owner=root mode=0755 state=directory file: path=/var/www/acme-challenge/ owner=root mode=0755 state=directory

View File

@ -4,6 +4,3 @@ mode: {{ certmgr_mode }}
webdir: /var/www/acme-challenge/ webdir: /var/www/acme-challenge/
ttl_days: 30 ttl_days: 30
authority: "https://acme-v01.api.letsencrypt.org" authority: "https://acme-v01.api.letsencrypt.org"
defaults:
cafile: /etc/acme/lets-encrypt-x3-cross-signed.pem