70 lines
1.8 KiB
YAML
70 lines
1.8 KiB
YAML
---
|
|
|
|
- name: Get latest lego version
|
|
github_release:
|
|
user: go-acme
|
|
repo: lego
|
|
action: latest_release
|
|
token: "{{ vault_github_token }}"
|
|
delegate_to: localhost
|
|
run_once: true
|
|
register: lego_version
|
|
|
|
- name: Set architecture alias
|
|
set_fact:
|
|
architecture_alias: "amd64" # noqa: var-naming[no-role-prefix]
|
|
when: ansible_architecture == "x86_64"
|
|
|
|
- name: Set architecture alias
|
|
set_fact:
|
|
architecture_alias: "arm64" # noqa: var-naming[no-role-prefix]
|
|
when: ansible_architecture == "aarch64"
|
|
|
|
- name: "Download lego from GitHub ({{ lego_version.tag }})"
|
|
get_url:
|
|
url: "https://github.com/go-acme/lego/releases/download/\
|
|
{{ lego_version.tag }}/lego_{{ lego_version.tag }}\
|
|
_linux_{{ architecture_alias }}.tar.gz"
|
|
dest: "/var/tmp/lego.tar.gz"
|
|
mode: "0644"
|
|
register: lego_download_archive
|
|
until: lego_download_archive is succeeded
|
|
retries: 3
|
|
delay: 5
|
|
|
|
- name: Unpack lego
|
|
unarchive:
|
|
remote_src: true
|
|
src: "/var/tmp/lego.tar.gz"
|
|
dest: "{{ lego_install_dir }}"
|
|
extra_opts:
|
|
- --one-top-level
|
|
include:
|
|
- lego
|
|
|
|
- name: Create lego config directory
|
|
file:
|
|
path: "{{ lego_config_dir }}"
|
|
mode: "0755"
|
|
state: directory
|
|
|
|
- name: Register lego and create cert
|
|
command: |
|
|
{{ lego_install_dir }}/lego --accept-tos
|
|
{% for dns in certificate_domains %}
|
|
--domains="{{ dns }}"
|
|
{% endfor %}
|
|
{{ lego_cli_params | join(' ') }}
|
|
run
|
|
args:
|
|
creates: "/var/lib/lego/accounts"
|
|
environment: '{ "{{ lego_provider|upper }}_API_KEY": "{{ vault_ionos_token_dns }}" }'
|
|
|
|
- name: Copy lego systemd service
|
|
template:
|
|
src: "{{ item }}.j2"
|
|
dest: "/etc/systemd/system/{{ item }}"
|
|
mode: "0644"
|
|
loop: [lego.service, lego.timer]
|
|
notify: [Restart lego_service, Restart lego_timer]
|