kevinveenbirkenbach/computer-playbook
1
0
Fork 0
mirror of https://github.com/kevinveenbirkenbach/computer-playbook.git synced 2025-09-08 11:17:17 +02:00
Code Issues Packages Projects Releases Wiki Activity

Shorted generic- to gen-

Browse Source
This commit is contained in:
Kevin Veen-Birkenbach
2025-07-09 03:55:24 +02:00
parent 8c411a21c7
commit 94bb060a5b
123 changed files with 96 additions and 96 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
roles/webserver-tls-renew/README.md
View File

@@ -6,10 +6,10 @@ This role automates the setup of an automatic [Let's Encrypt](https://letsencryp
## 📖 Overview
Optimized for Archlinux systems, this role installs the `certbot-nginx` package, configures a dedicated `systemd` service for certificate renewal, and integrates with a `generic-timer` to schedule periodic renewals. After a renewal, Nginx is reloaded to apply the updated certificates immediately.
Optimized for Archlinux systems, this role installs the `certbot-nginx` package, configures a dedicated `systemd` service for certificate renewal, and integrates with a `gen-timer` to schedule periodic renewals. After a renewal, Nginx is reloaded to apply the updated certificates immediately.
### Key Features
- **Automatic Renewal:** Schedules unattended certificate renewals using generic-timers.
- **Automatic Renewal:** Schedules unattended certificate renewals using gen-timers.
- **Seamless Nginx Reload:** Reloads the Nginx service automatically after successful renewals.
- **Systemd Integration:** Manages renewal operations reliably with `systemd` and `alert-compose`.
- **Quiet and Safe Operation:** Uses `--quiet` and `--agree-tos` flags to ensure non-interactive renewals.
@@ -22,7 +22,7 @@ The Nginx Certbot Automation role ensures that Let's Encrypt SSL/TLS certificate
- **Certbot-Nginx Package Installation:** Installs required certbot plugins for Nginx.
- **Custom Systemd Service:** Configures a lightweight, dedicated renewal service.
- **Timer Setup:** Uses generic-timer to run certbot renewals periodically.
- **Timer Setup:** Uses gen-timer to run certbot renewals periodically.
- **Failure Notification:** Integrated with `alert-compose` for alerting on failures.
## 🔗 Learn More

2
roles/webserver-tls-renew/meta/main.yml
View File

@@ -27,7 +27,7 @@ galaxy_info:
issue_tracker_url: "https://s.veen.world/cymaisissues"
documentation: "https://s.veen.world/cymais"
dependencies:
- generic-certbot
- gen-certbot
- webserver-core
- alert-compose
- cln-certs

4
roles/webserver-tls-renew/tasks/main.yml
View File

@@ -17,9 +17,9 @@
service_name: "{{ role_name }}"
when: run_once_nginx_certbot is not defined
- name: "include role for generic-timer for {{service_name}}"
- name: "include role for gen-timer for {{service_name}}"
include_role:
name: generic-timer
name: gen-timer
vars:
on_calendar: "{{on_calendar_renew_lets_encrypt_certificates}}"
persistent: "true"