kevinveenbirkenbach/computer-playbook
1
0
Fork 0
mirror of https://github.com/kevinveenbirkenbach/computer-playbook.git synced 2025-07-02 07:02:02 +02:00
Code Issues Packages Projects Releases Wiki Activity

Ignored non functional code

Browse Source
This commit is contained in:
Kevin Veen-Birkenbach 2025-04-04 12:00:19 +02:00
parent ccfc23f3fe
commit 5151a21575
No known key found for this signature in database
GPG Key ID: 44D8F11FD62F878E
1 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
roles/nginx-https-get-cert/tasks/main.yml
View File

@ -8,18 +8,21 @@
# Wildcard certificate should not be used # Wildcard certificate should not be used
# OR: The domain is not a first-level subdomain of the primary domain # OR: The domain is not a first-level subdomain of the primary domain
# The following should not work, checkout the Setup.md instructions.
# @see https://chatgpt.com/share/67efa9f0-1cdc-800f-8bce-62b00fc3e6a2
- name: "recieve wildcard certificate *{{ primary_domain }} for {{domain}}" - name: "recieve wildcard certificate *{{ primary_domain }} for {{domain}}"
command: >- command: >-
certbot certonly --agree-tos --email {{ users.administrator.email }} certbot certonly --agree-tos --email {{ users.administrator.email }}
--non-interactive --webroot -w /var/lib/letsencrypt/ -d {{ primary_domain }} -d *.{{ primary_domain }} --non-interactive --webroot -w /var/lib/letsencrypt/ -d {{ primary_domain }} -d *.{{ primary_domain }}
{{ '--test-cert' if mode_test | bool else '' }} {{ '--test-cert' if mode_test | bool else '' }}
when: when:
- enable_wildcard_certificate | bool - enable_wildcard_certificate | bool
# Wildcard certificate is enabled # Wildcard certificate is enabled
- domain.split('.') | length == (primary_domain.split('.') | length + 1) and domain.endswith(primary_domain) - domain.split('.') | length == (primary_domain.split('.') | length + 1) and domain.endswith(primary_domain)
# AND: The domain is a direct first-level subdomain of the primary domain # AND: The domain is a direct first-level subdomain of the primary domain
- run_once_recieve_certificate is not defined - run_once_recieve_certificate is not defined
# Ensure this task runs only once for the wildcard certificate # Ensure this task runs only once for the wildcard certificate
ignore_errors: true
- name: "Cleanup dedicated cert for {{ domain }}" - name: "Cleanup dedicated cert for {{ domain }}"
command: >- command: >-