%PDF- %PDF-
| Direktori : /proc/self/root/etc/ansible/roles/web/tasks/ |
| Current File : //proc/self/root/etc/ansible/roles/web/tasks/configure_le.yml |
---
# configure Let's Encrypt certificates
# dns_names: - array for domain names
# email: email address
# site_name: - bitrix site names
- include: sites-gathering_facts_site_names.yml
- debug:
msg: "{{ bx_sites_info }}"
- name: set cluster mark to disabled state
set_fact:
is_cluster: "disable"
- name: change cluster mark if web cluster configured
set_fact:
is_cluster: "enable"
when: "cluster_web_configure == 'enable'"
- name: download dehydrated
git:
repo: "https://github.com/lukas2511/dehydrated.git"
dest: /home/bitrix/dehydrated
clone: yes
update: yes
- name: create directories
file:
path: "{{ item }}"
state: directory
owner: bitrix
group: bitrix
force: yes
recurse: yes
with_items:
- /home/bitrix/dehydrated
- /var/www/dehydrated
- name: create nginx LE config
template:
src: nginx/letsencrypt-challenge-tokens.conf.j2
dest: /etc/nginx/bx/conf/letsencrypt-challenge-tokens.conf
- name: create nginx SSL options config
template:
src: nginx/ssl_options.conf.j2
dest: /etc/nginx/bx/conf/ssl_options.conf
- include: configure_le_location_per_site.yml
when: is_cluster == 'disable' and sites_cnt > 0
- include: configure_le_location_on_balancer.yml
when: is_cluster == 'enable' and sites_cnt > 0
- name: restart nginx
service:
name: nginx
state: restarted
- include: dehydrated.yml
vars:
dehydrated_type: "prod"
- include: configure_le_certificates_per_site.yml
when: sites_cnt > 0
- include: configure_nginx_push_server.yml
when: push_server is defined and push_server > 0
- name: reload nginx
service:
name: nginx
state: reloaded
- name: reload httpd
service:
name: httpd
state: reloaded