2018-09-11 17:37:10 +02:00
|
|
|
---
|
|
|
|
|
- block:
|
|
|
|
|
- name: Create the acme hooks directory if it does not yet exist
|
|
|
|
|
file: dest={{ letsencrypt_acme_services_scripts_dir }} state=directory owner=root group=root
|
|
|
|
|
|
|
|
|
|
- name: Install a script that fix the letsencrypt certificate for mongodb and then reload the service
|
|
|
|
|
template: src=mongodb-letsencrypt-acmetool.sh dest={{ letsencrypt_acme_services_scripts_dir }}/mongodb owner=root group=root mode=4555
|
|
|
|
|
|
2018-09-12 19:04:46 +02:00
|
|
|
- name: Verify if the mongodb pem file exists
|
|
|
|
|
stat: path={{ mongodb_ssl_certkey_file }}
|
|
|
|
|
register: mongodb_pem
|
|
|
|
|
|
2018-09-12 19:00:01 +02:00
|
|
|
- name: Copy the certificate and its key where the mongo server expects it
|
|
|
|
|
command: "{{ letsencrypt_acme_services_scripts_dir }}/mongodb"
|
2018-09-13 11:41:24 +02:00
|
|
|
when: not mongodb_pem.stat.exists
|
2018-09-12 19:00:01 +02:00
|
|
|
|
2018-09-11 17:37:10 +02:00
|
|
|
when:
|
|
|
|
|
- mongodb_ssl_letsencrypt_managed
|
|
|
|
|
- letsencrypt_acme_install
|
|
|
|
|
tags: [ 'mongodb', 'letsencrypt', 'mongodb_letsencrypt' ]
|
