Skip to content
Snippets Groups Projects

cleanup: remove distribution specific task files and strip dns renewal hook

Merged Alexander Käb requested to merge dns-do-not-force-fullchain-script into main
18 files
+ 174
240
Compare changes
  • Side-by-side
  • Inline
Files
18
+ 22
22
---
# certbot settings
certbot_dns_challenge: false # default use webserver, true to obtain certificate using dns challenge
certbot_lego_version: "4.11.0" # lego version - Let's Encrypt client
certbot_dns_provider: "designate" # list of available providers https://go-acme.github.io/lego/dns/
dns_provider_auth_env_variables: # variables required to authenticate dns provider
OS_AUTH_URL: "https://openstack.example.org"
OS_REGION_NAME: "RegionOne"
OS_AUTH_TYP: "v3applicationcredential" # default is to use application credential rather than password
OS_APPLICATION_CREDENTIAL_ID: "{{ vault_os_application_credential_id }}"
OS_APPLICATION_CREDENTIAL_SECRET: "{{ vault_os_application_credential_secret }}"
# Packages / timer names based on Distribution
certbot_pkg_name:
CentOS: "certbot"
Debian: "certbot"
Ubuntu: "certbot"
Fedora: "certbot"
# TODO: Might need to change
certbot_timer_name:
CentOS: "certbot-renew.timer"
Debian: "certbot.timer"
Ubuntu: "snap.certbot-renew.timer"
Fedora: "certbot-renew.timer"
certbot_fqdn:
- example.de
certbot_admin_email: "admin@example.de"
# certbot_webroot: "/var/www/example" # if undefined use --standalone
# certbot settings
dns_challenge: false # default use webserver, true to obtain certificate using dns challenge
lego_version: "4.11.0" # lego version - Let's Encrypt client
lego_dns_provider: "designate" # list of available providers https://go-acme.github.io/lego/dns/
dns_provider_auth_env_variables: {} # variables required to authenticate dns provider
# application settings
# certbot_application: "example" # if defined copy certs to application dir and setup deploy hooks
certbot_application_dir: "/etc/{{ certbot_application }}"
certbot_application_deploy_hook: |
#!/bin/sh
cert_fqdns:
- example.de
admin_email: "admin@example.de"
cp {{ certbot_live_dir }}/fullchain.pem {{ certbot_application_dir }}
cp {{ certbot_live_dir }}/privkey.pem {{ certbot_application_dir }}
systemctl restart {{ certbot_application }}.service
# LEGO Settings
lego_extra_flags: []
Loading