19 lines
899 B
YAML
19 lines
899 B
YAML
---
|
|
- block:
|
|
- name: Create the acme hooks directory if it does not yet exist
|
|
file: dest={{ letsencrypt_acme_sh_services_scripts_dir }} state=directory owner=root group=root
|
|
|
|
- name: Install a script that fix the letsencrypt certificate for haproxy and then reloads the service
|
|
template: src=haproxy-letsencrypt-acme.sh.j2 dest={{ letsencrypt_acme_sh_services_scripts_dir }}/haproxy owner=root group=root mode=4555
|
|
|
|
- name: Create the haproxy PKI directory
|
|
file: dest=/etc/pki/haproxy state=directory owner=root group=haproxy mode=0750
|
|
|
|
- name: Run the letsencrypt hook once, to create the certificate chain that haproxy will use
|
|
shell: "{{ letsencrypt_acme_sh_services_scripts_dir }}/haproxy"
|
|
args:
|
|
creates: '{{ pki_dir }}/haproxy/haproxy.pem'
|
|
|
|
when: letsencrypt_acme_sh_install
|
|
tags: [ 'haproxy', 'letsencrypt', 'letsencrypt_acme_sh', 'haproxy_letsencrypt' ]
|