24 lines
996 B
YAML
24 lines
996 B
YAML
---
|
|
- block:
|
|
- name: Create the acme hooks directory if it does not yet exist
|
|
file: dest={{ letsencrypt_acme_sh_services_scripts_dir }} state=directory owner=root group=root
|
|
|
|
- name: Install a script that fix the letsencrypt certificate for haproxy and then reloads the service
|
|
template: src=haproxy-letsencrypt-acme.sh.j2 dest={{ letsencrypt_acme_sh_services_scripts_dir }}/haproxy owner=root group=root mode=4555
|
|
|
|
- name: Create the haproxy PKI directory
|
|
file:
|
|
dest: /etc/pki/haproxy
|
|
state: directory
|
|
owner: root
|
|
group: "{%if not haproxy_docker_container %}haproxy{% else %}root{% endif %}"
|
|
mode: "0750"
|
|
|
|
- name: Run the letsencrypt hook once, to create the certificate chain that haproxy will use
|
|
shell: "{{ letsencrypt_acme_sh_services_scripts_dir }}/haproxy"
|
|
args:
|
|
creates: '{{ pki_dir }}/haproxy/haproxy.pem'
|
|
|
|
when: letsencrypt_acme_install
|
|
tags: [ 'haproxy', 'letsencrypt', 'letsencrypt_acme_sh', 'haproxy_letsencrypt' ]
|