Felix Stupp
|
fcb1ed71b6
|
Added debug mode with support for all roles
|
4 years ago |
Felix Stupp
|
15a6cb1ff9
|
acme/certificate: Renamed tag for certificate tasks
|
4 years ago |
Felix Stupp
|
482200821e
|
acme/certificate: Defined must-staple optional for certificate
|
4 years ago |
Felix Stupp
|
c66dbe42c4
|
acme/certificate: Use certificate_name for task name
|
4 years ago |
Felix Stupp
|
58749bcc43
|
acme/certificate: Fixed quoting of nginx_service_name
|
4 years ago |
Felix Stupp
|
f46e51115e
|
acme: Changed underlying package from acme.sh to certbot
|
4 years ago |
Felix Stupp
|
0f57d44bb1
|
acme/certificate: Renamed certificate_location to fullchain_location
|
4 years ago |
Felix Stupp
|
55451f321a
|
acme,nginx: Reversed dependency to match real dependency
|
4 years ago |
Felix Stupp
|
9ad4ada018
|
acme,nginx: Renamed var for validation root to acme prefix
|
4 years ago |
Felix Stupp
|
d48d4885d7
|
Extracted admin_mail into global var
|
4 years ago |
Felix Stupp
|
6dcea566d6
|
acme/certificate: Removed invalid --ecc parameter
|
4 years ago |
Felix Stupp
|
0e49941e1a
|
acme/certificate: Fixed quoting for acme.sh commands
|
4 years ago |
Felix Stupp
|
98b7f4744e
|
Extracted service_name of nginx to global var
|
4 years ago |
Felix Stupp
|
9fa36a210f
|
acme/certificate: Changed default reload command to "reload nginx"
|
4 years ago |
Felix Stupp
|
1958c4df54
|
dns: Renamed role entries to server_entries
To distinguish between simple entries role (coming in the future) and
entries role bundled with server-related entries (A, AAAA, SSHFP)
|
5 years ago |
Felix Stupp
|
2a161ca509
|
acme/certificate: Ensure dns entry is given by depending on role dns/entries
|
5 years ago |
Felix Stupp
|
5a41a9afc9
|
acme/certificate: Document var domain as required
|
5 years ago |
Felix Stupp
|
24ab62d6a0
|
acme/application: Fixed usage of YAML multiline for "Upgrade acme.sh"
|
5 years ago |
Felix Stupp
|
e24613d02c
|
acme/application: Added installing helper scripts for managing
|
5 years ago |
Felix Stupp
|
3547927d5a
|
acme/certificate: Added support for custom reload cmd
|
5 years ago |
Felix Stupp
|
b6e70b881a
|
acme: Fixed using correct home and config-home directories
|
5 years ago |
Felix Stupp
|
bef682140b
|
acme/certificate: Removed invalid command argument
|
5 years ago |
Felix Stupp
|
a3fde6aa3c
|
acme: Moved certificate handling to custom system user
Avoided using root for acme.sh
Modified also role nginx/application
|
5 years ago |
Felix Stupp
|
9e20b807f1
|
acme/application: Removed getting if acme is installed
As it should be installed or otherwise the playbook failed
|
5 years ago |
Felix Stupp
|
6509b01d71
|
acme: Added ToDo for "Create custom user ..."
|
5 years ago |
Felix Stupp
|
bae56869f6
|
acme/certificate: Enabled OCSP must-stable for certificates
|
5 years ago |
Felix Stupp
|
1dd31a451f
|
acme_certificate: Defined changed_when for calling acme.sh
|
6 years ago |
Felix Stupp
|
226bc9c873
|
Reconfigured nginx / acme validation handling
|
6 years ago |
Felix Stupp
|
308c6a95d4
|
Configured allow_duplicates for several roles
|
6 years ago |
Felix Stupp
|
6a6e2f6602
|
Moved dependency of certificate validation directory to nginx role
|
6 years ago |
Felix Stupp
|
4862b9dd69
|
Added roles for automatic certificate issue with acme.sh
|
6 years ago |