mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2025-09-03 00:46:10 +02:00
Renamed cymais to infinito and did some other optimations and logout implementations
This commit is contained in:
@@ -7,7 +7,7 @@ This Ansible role automates the detection, revocation and deletion of unused Let
|
||||
## Overview
|
||||
|
||||
- Installs the `certreap` cleanup tool using the `pkgmgr-install` role
|
||||
- Deploys and configures a `sys-cln-certs.cymais.service` systemd unit
|
||||
- Deploys and configures a `sys-cln-certs.infinito.service` systemd unit
|
||||
- (Optionally) Sets up a recurring cleanup via a systemd timer using the `sys-timer` role
|
||||
- Integrates with `sys-alm-compose` to send failure notifications
|
||||
- Ensures idempotent execution with a `run_once_cleanup_certs` flag
|
||||
@@ -18,7 +18,7 @@ This Ansible role automates the detection, revocation and deletion of unused Let
|
||||
Uses `pkgmgr-install` to install the `certreap` binary.
|
||||
|
||||
- **Systemd Service Configuration**
|
||||
Deploys `sys-cln-certs.cymais.service` and reloads/restarts it on changes.
|
||||
Deploys `sys-cln-certs.infinito.service` and reloads/restarts it on changes.
|
||||
|
||||
- **Systemd Timer Scheduling**
|
||||
Optionally wires in a timer via the `sys-timer` role, controlled by the `on_calendar_cleanup_certs` variable.
|
||||
@@ -27,11 +27,11 @@ This Ansible role automates the detection, revocation and deletion of unused Let
|
||||
Prevents multiple runs in one play by setting a `run_once_cleanup_certs` fact.
|
||||
|
||||
- **Failure Notification**
|
||||
Triggers `sys-alm-compose.cymais@sys-cln-certs.cymais.service` on failure.
|
||||
Triggers `sys-alm-compose.infinito@sys-cln-certs.infinito.service` on failure.
|
||||
|
||||
## Further Resources
|
||||
|
||||
- [certreap on GitHub](https://github.com/kevinveenbirkenbach/certreap)
|
||||
- [Ansible community.general.pacman module](https://docs.ansible.com/ansible/latest/collections/community/general/pacman_module.html)
|
||||
- [CyMaIS NonCommercial License (CNCL)](https://s.veen.world/cncl)
|
||||
- [Infinito.Nexus NonCommercial License (CNCL)](https://s.veen.world/cncl)
|
||||
- [systemd.unit(5) manual](https://www.freedesktop.org/software/systemd/man/systemd.unit.html)
|
||||
|
@@ -1,6 +1,6 @@
|
||||
- name: "Reload and restart sys-cln-certs.cymais.service"
|
||||
- name: "Reload and restart sys-cln-certs.infinito.service"
|
||||
systemd:
|
||||
name: sys-cln-certs.cymais.service
|
||||
name: sys-cln-certs.infinito.service
|
||||
enabled: yes
|
||||
daemon_reload: yes
|
||||
state: restarted
|
@@ -2,7 +2,7 @@
|
||||
galaxy_info:
|
||||
author: "Kevin Veen-Birkenbach"
|
||||
description: "Automates the revocation and deletion of unused Let's Encrypt certificates"
|
||||
license: "CyMaIS NonCommercial License (CNCL)"
|
||||
license: "Infinito.Nexus NonCommercial License (CNCL)"
|
||||
license_url: "https://s.veen.world/cncl"
|
||||
company: |
|
||||
Kevin Veen-Birkenbach
|
||||
|
@@ -5,11 +5,11 @@
|
||||
package_name: certreap
|
||||
when: run_once_cleanup_certs is not defined
|
||||
|
||||
- name: configure sys-cln-certs.cymais.service
|
||||
- name: configure sys-cln-certs.infinito.service
|
||||
template:
|
||||
src: sys-cln-certs.service.j2
|
||||
dest: /etc/systemd/system/sys-cln-certs.cymais.service
|
||||
notify: Reload and restart sys-cln-certs.cymais.service
|
||||
dest: /etc/systemd/system/sys-cln-certs.infinito.service
|
||||
notify: Reload and restart sys-cln-certs.infinito.service
|
||||
when: run_once_cleanup_certs is not defined
|
||||
|
||||
- name: "set 'service_name' to '{{ role_name }}'"
|
||||
|
@@ -1,6 +1,6 @@
|
||||
[Unit]
|
||||
Description=Detect, revoke, and delete unused Let's Encrypt certificates based on active NGINX configuration files.
|
||||
OnFailure=sys-alm-compose.cymais@%n.service
|
||||
OnFailure=sys-alm-compose.infinito@%n.service
|
||||
|
||||
[Service]
|
||||
Type=oneshot
|
||||
|
Reference in New Issue
Block a user