Ansible role that manages x509 certificates assigned by letsencrypt.org, using the acme.sh client.
Go to file
Andrea Dell'Amico 947ee4dbc4 The firewalld_enabled variable isn't always defined. 2020-08-11 16:41:58 +02:00
defaults On EL distribution, open http before requesting a certificate. 2020-07-30 16:39:28 +02:00
files Use 'restart' and not 'start' in the systemctl commands. 2020-05-18 13:03:59 +02:00
handlers Letsencrypt acme-sh-client has its own repository. 2020-05-17 16:39:11 +02:00
meta Letsencrypt acme-sh-client has its own repository. 2020-05-17 16:39:11 +02:00
tasks The firewalld_enabled variable isn't always defined. 2020-08-11 16:41:58 +02:00
templates Letsencrypt acme-sh-client has its own repository. 2020-05-17 16:39:11 +02:00
tests Initial commit 2020-05-17 16:07:02 +02:00
vars Initial commit 2020-05-17 16:07:02 +02:00
.gitignore Initial commit 2020-05-17 16:07:02 +02:00
LICENSE Initial commit 2020-05-17 16:07:02 +02:00
README.md Letsencrypt acme-sh-client has its own repository. 2020-05-17 16:39:11 +02:00

README.md

Role Name

A role that installs the acme.sh Letsencrypt.org client

Requirements

Git must be available as a package

Role Variables

Here are listed the most important defaults. See defaults/main.yml for the complete set of variables.

letsencrypt_acme_install: False
letsencrypt_acme_sh_git_install: True
letsencrypt_acme_sh_certificates_install_dir: '{{ ansible_fqdn }}'
letsencrypt_acme_sh_certificates_install_base_path: '{{ letsencrypt_acme_sh_user_home }}/live'
letsencrypt_acme_sh_certificates_install_path: '{{ letsencrypt_acme_sh_certificates_install_base_path }}/{{ letsencrypt_acme_sh_certificates_install_dir }}'
letsencrypt_acme_email: sysadmin@example.com
  • Set the following one to 80 if there is no web server that acts as reverse proxy.
letsencrypt_acme_standalone_port: 4402
letsencrypt_acme_sh_domains:
  - { domain: '{{ ansible_fqdn }}', standalone: True }

Dependencies

None

License

EUPL-1.2

Author Information

Andrea DellAmico, andrea.dellamico@isti.cnr.it