README.md

ansible-certbot

Deploy certbot and enable auto-renew.

Role Variables

# certbot settings
certbot_fqdn:
  - example.de
certbot_admin_email: "admin@example.de"
# certbot_webroot: "/var/www/example"                          # if undefined use --standalone

# application settings
# certbot_application: "example"                               # if defined copy certs to application dir and setup deploy hooks
certbot_application_dir: "/etc/{{ certbot_application }}"
certbot_application_deploy_hook: |
  #!/bin/sh

  cp {{ certbot_live_dir }}/fullchain.pem {{ certbot_application_dir }}
  cp {{ certbot_live_dir }}/privkey.pem {{ certbot_application_dir }}

  systemctl restart {{ certbot_application }}.service

Example Playbook

# requirements.yaml
roles:
  - name: hdacloud.certbot
    src: git+https://code.fbi.h-da.de/hdacloud/ansible_certbot
    version: main

- hosts: all
  roles:
    - hdacloud.certbot

License

See LICENSE