You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
85 lines
1.9 KiB
85 lines
1.9 KiB
---
|
|
- name: Install prereqs (debian)
|
|
apt:
|
|
name:
|
|
- python3-cryptography
|
|
state: latest
|
|
update_cache: yes
|
|
when: ansible_distribution == "Ubuntu"
|
|
|
|
- name: Add acme group
|
|
group:
|
|
name: "{{ acmedns_base_group }}"
|
|
system: yes
|
|
|
|
- name: Add acme user
|
|
user:
|
|
name: "{{ acmedns_base_user }}"
|
|
group: "{{ acmedns_base_group }}"
|
|
system: yes
|
|
create_home: yes
|
|
home: "{{ acmedns_base_home }}"
|
|
|
|
- name: Create acme user .ssh directory
|
|
file:
|
|
path: "{{ acmedns_base_home }}/.ssh"
|
|
state: directory
|
|
owner: "{{ acmedns_base_user }}"
|
|
group: "{{ acmedns_base_group }}"
|
|
mode: "0700"
|
|
|
|
- name: Create acme certificates directory
|
|
file:
|
|
path: "{{ acmedns_base_certificate_dir }}"
|
|
state: directory
|
|
owner: "{{ acmedns_base_user }}"
|
|
group: "{{ acmedns_base_group }}"
|
|
mode: "0700"
|
|
|
|
- name: Set acme user ssh key
|
|
copy:
|
|
content: "{{ item.value }}"
|
|
dest: "{{ acmedns_base_home }}/.ssh/{{ item.name }}"
|
|
owner: "{{ acmedns_base_user }}"
|
|
group: "{{ acmedns_base_group }}"
|
|
mode: "0600"
|
|
with_items:
|
|
- name: id_rsa
|
|
value: "{{ acmedns_base_privkey }}"
|
|
- name: id_rsa.pub
|
|
value: "{{ acmedns_base_pubkey }}"
|
|
no_log: yes
|
|
|
|
- name: Get lego
|
|
get_url:
|
|
url: "{{ acmedns_base_lego_uri }}"
|
|
dest: "{{ acmedns_base_lego_archive_path }}"
|
|
|
|
- name: Create lego extration dir
|
|
file:
|
|
state: directory
|
|
path: "{{ acmedns_base_lego_extracted_path }}"
|
|
owner: "{{ acmedns_base_user }}"
|
|
group: "{{ acmedns_base_group }}"
|
|
mode: "0755"
|
|
|
|
- name: Extract lego
|
|
unarchive:
|
|
src: "{{ acmedns_base_lego_archive_path }}"
|
|
dest: "{{ acmedns_base_lego_extracted_path }}"
|
|
remote_src: yes
|
|
|
|
- name: Install lego
|
|
file:
|
|
state: link
|
|
src: "{{ acmedns_base_lego_extracted_path }}/lego"
|
|
dest: /usr/local/bin/lego
|
|
|
|
- name: Install lego wrapper
|
|
template:
|
|
src: wraplego.py.j2
|
|
dest: /usr/local/bin/wraplego.py
|
|
owner: root
|
|
group: root
|
|
mode: "0755"
|