jonathan/infra
1
0
Fork 0
Code Actions Activity

add super secret secrets

Browse Source
This commit is contained in:
Jonathan DeMasi
2026-01-24 13:21:14 -07:00
parent 04823e681f
commit f8b2ae3f02
4 changed files with 23 additions and 23 deletions
Download Patch File Download Diff File Expand all files Collapse all files

19
ansible/roles/lego/tasks/generate_cert.yaml Normal file
View File

@@ -0,0 +1,19 @@
- name: Gather package facts
ansible.builtin.package_facts:
manager: auto
- name: Generate initial cert (http)
command:
cmd: /usr/local/bin/lego -a --email="{{ letsencrypt_email }}" --domains="{{ inventory_hostname | default(cert_domain) }}" --key-type {{ cert_key_type | default('rsa4096') }} --http run
chdir: /root
creates: "/root/.lego/certificates/{{ inventory_hostname | default(cert_domain) }}.crt"
- name: Generate initial cert (dns)
command:
cmd: /usr/local/bin/lego -a --email="{{ letsencrypt_email }}" --dns linode --domains="{{ inventory_hostname | default(cert_domain) }}" --key-type {{ cert_key_type | default('rsa4096') }} run
chdir: /root
creates: "/root/.lego/certificates/{{ inventory_hostname | default(cert_domain) }}.crt"
environment:
LINODE_POLLING_INTERVAL: 120
LINODE_PROPAGATION_TIMEOUT: 600
LINODE_TOKEN: {{ linode_dns_token }}