initial cleanup server-manager

roles/native-certbot-nginx/handlers/main.yml

@@ -0,0 +1,4 @@
+- name: restart certbot service
+  service: name=certbot.service state=restarted enabled=yes
+- name: restart certbot timer
+  service: name=certbot.timer state=restarted enabled=yes

roles/native-certbot-nginx/meta/main.yml

@@ -0,0 +1,2 @@
+dependencies:
+- native-nginx

roles/native-certbot-nginx/tasks/main.yml

@@ -0,0 +1,13 @@
+- name: install certbot
+  pacman:
+    name: [certbot,certbot-nginx]
+    state: present
+  notify: restart certbot service
+
+- name: configure certbot.service.tpl
+  template: src=certbot.service dest=/etc/systemd/system/certbot.service
+  notify: restart certbot service
+
+- name: configure certbot.timer.tpl
+  template: src=certbot.timer dest=/etc/systemd/system/certbot.timer
+  notify: restart certbot timer

roles/native-certbot-nginx/templates/certbot.service

@@ -0,0 +1,7 @@
+[Unit]
+Description=Let's Encrypt renewal
+
+[Service]
+Type=oneshot
+ExecStart=/usr/bin/certbot renew --quiet --agree-tos
+ExecStartPost=/bin/systemctl reload nginx.service

roles/native-certbot-nginx/templates/certbot.timer

@@ -0,0 +1,10 @@
+[Unit]
+Description=Twice daily renewal of Let's Encrypt's certificates
+
+[Timer]
+OnCalendar=0/12:00:00
+RandomizedDelaySec=1h
+Persistent=true
+
+[Install]
+WantedBy=timers.target