ansible-roles/library/roles/zulip/tasks/zulip-letsencrypt.yml

29 lines
1.1 KiB
YAML

---
- block:
- name: Setup a link for the ssl certificate file
file: src={{ letsencrypt_acme_certs_dir }}/fullchain dest={{ zulip_ssl_cert_file }} state=link
when: letsencrypt_acme_install
- name: Setup a link for the ssl key file
file: src={{ letsencrypt_acme_certs_dir }}/privkey dest={{ zulip_ssl_key_file }} state=link
when: letsencrypt_acme_install
- name: Create the acme hooks directory if it does not yet exist
file: dest={{ letsencrypt_acme_services_scripts_dir }} state=directory owner=root group=root
- name: Install a letsencrypt hook for nginx
copy: src=nginx-letsencrypt-acme.sh dest={{ letsencrypt_acme_services_scripts_dir }}/nginx owner=root group=root mode=4555
when:
- letsencrypt_acme_install is defined and letsencrypt_acme_install
- zulip_letsencrypt_managed
tags: [ 'zulip', 'letsencrypt' ]
- block:
- name: Remove the letsencrypt hook for nginx
file: path={{ letsencrypt_acme_services_scripts_dir }}/nginx state=absent
when: not zulip_letsencrypt_managed
tags: [ 'zulip', 'letsencrypt' ]