mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2025-08-29 15:06:26 +02:00
Another big round of refactoring and cleaning...
This commit is contained in:
@@ -6,12 +6,12 @@ This role automates the setup of an automatic [Let's Encrypt](https://letsencryp
|
||||
|
||||
## 📖 Overview
|
||||
|
||||
Optimized for Archlinux systems, this role installs the `certbot-nginx` package, configures a dedicated `systemd` service for certificate renewal, and integrates with a `gen-timer` to schedule periodic renewals. After a renewal, Nginx is reloaded to apply the updated certificates immediately.
|
||||
Optimized for Archlinux systems, this role installs the `certbot-nginx` package, configures a dedicated `systemd` service for certificate renewal, and integrates with a `sys-timer` to schedule periodic renewals. After a renewal, Nginx is reloaded to apply the updated certificates immediately.
|
||||
|
||||
### Key Features
|
||||
- **Automatic Renewal:** Schedules unattended certificate renewals using gen-timers.
|
||||
- **Automatic Renewal:** Schedules unattended certificate renewals using sys-timers.
|
||||
- **Seamless Nginx Reload:** Reloads the Nginx service automatically after successful renewals.
|
||||
- **Systemd Integration:** Manages renewal operations reliably with `systemd` and `alert-compose`.
|
||||
- **Systemd Integration:** Manages renewal operations reliably with `systemd` and `sys-alm-compose`.
|
||||
- **Quiet and Safe Operation:** Uses `--quiet` and `--agree-tos` flags to ensure non-interactive renewals.
|
||||
|
||||
## 🎯 Purpose
|
||||
@@ -22,8 +22,8 @@ The Nginx Certbot Automation role ensures that Let's Encrypt SSL/TLS certificate
|
||||
|
||||
- **Certbot-Nginx Package Installation:** Installs required certbot plugins for Nginx.
|
||||
- **Custom Systemd Service:** Configures a lightweight, dedicated renewal service.
|
||||
- **Timer Setup:** Uses gen-timer to run certbot renewals periodically.
|
||||
- **Failure Notification:** Integrated with `alert-compose` for alerting on failures.
|
||||
- **Timer Setup:** Uses sys-timer to run certbot renewals periodically.
|
||||
- **Failure Notification:** Integrated with `sys-alm-compose` for alerting on failures.
|
||||
|
||||
## 🔗 Learn More
|
||||
|
||||
|
@@ -29,5 +29,5 @@ galaxy_info:
|
||||
dependencies:
|
||||
- gen-certbot
|
||||
- srv-web-7-4-core
|
||||
- alert-compose
|
||||
- cln-certs
|
||||
- sys-alm-compose
|
||||
- sys-cln-certs
|
||||
|
@@ -17,9 +17,9 @@
|
||||
service_name: "{{ role_name }}"
|
||||
when: run_once_nginx_certbot is not defined
|
||||
|
||||
- name: "include role for gen-timer for {{service_name}}"
|
||||
- name: "include role for sys-timer for {{service_name}}"
|
||||
include_role:
|
||||
name: gen-timer
|
||||
name: sys-timer
|
||||
vars:
|
||||
on_calendar: "{{on_calendar_renew_lets_encrypt_certificates}}"
|
||||
persistent: "true"
|
||||
|
@@ -1,6 +1,6 @@
|
||||
[Unit]
|
||||
Description=Let's Encrypt renewal
|
||||
OnFailure=alert-compose.cymais@%n.service
|
||||
OnFailure=sys-alm-compose.cymais@%n.service
|
||||
|
||||
[Service]
|
||||
Type=oneshot
|
||||
|
Reference in New Issue
Block a user