diff --git a/ansible/roles/nginx/tasks/main.yaml b/ansible/roles/nginx/tasks/main.yaml index 85fcd4b..9b3bda3 100644 --- a/ansible/roles/nginx/tasks/main.yaml +++ b/ansible/roles/nginx/tasks/main.yaml @@ -32,6 +32,27 @@ notify: Restart nginx when: nginx_ssl_enabled +- name: Copy SSL certificate into place for SSL enabled nginx server + copy: + src: /root/.lego/certificates/{{ inventory_hostname }}.crt + dest: /etc/nginx/ssl/{{ inventory_hostname }}.crt + owner: nginx + group: nginx + mode: 0600 + remote_src: true + when: nginx_ssl_enabled + +- name: Copy SSL key into place for SSL enabled nginx server + copy: + src: /root/.lego/certificates/{{ inventory_hostname }}.key + dest: /etc/nginx/ssl/{{ inventory_hostname }}.key + owner: nginx + group: nginx + mode: 0600 + remote_src: true + when: nginx_ssl_enabled + + - name: Create web root file: path: /srv/http/{{ inventory_hostname }}/html