kevinveenbirkenbach/computer-playbook
1
0
Fork 0
mirror of https://github.com/kevinveenbirkenbach/computer-playbook.git synced 2025-08-15 08:30:46 +02:00
Code Issues Packages Projects Releases Wiki Activity

Encapsulated SAN in block with when

Browse Source
This commit is contained in:
Kevin Veen-Birkenbach 2025-08-11 14:31:10 +02:00
parent 5709935c92
commit e4cc928eea
No known key found for this signature in database
GPG Key ID: 44D8F11FD62F878E
1 changed files with 28 additions and 29 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

57
roles/srv-web-6-6-tls-core/tasks/flavors/san.yml
View File

@ -1,32 +1,31 @@
- name: Install certbundle - block:
include_role: - name: Install certbundle
name: pkgmgr-install include_role:
vars: name: pkgmgr-install
package_name: certbundle vars:
when: run_once_san_certs is not defined package_name: certbundle
- name: Generate SAN certificate with certbundle - name: Generate SAN certificate with certbundle
command: >- command: >-
certbundle certbundle
--domains "{{ current_play_domains_all | join(',') }}" --domains "{{ current_play_domains_all | join(',') }}"
--certbot-email "{{ users.administrator.email }}" --certbot-email "{{ users.administrator.email }}"
--certbot-acme-challenge-method "{{ certbot_acme_challenge_method }}" --certbot-acme-challenge-method "{{ certbot_acme_challenge_method }}"
--chunk-size 100 --chunk-size 100
{% if certbot_acme_challenge_method != 'webroot' %} {% if certbot_acme_challenge_method != 'webroot' %}
--certbot-credentials-file "{{ certbot_credentials_file }}" --certbot-credentials-file "{{ certbot_credentials_file }}"
--certbot-dns-propagation-seconds "{{ certbot_dns_propagation_wait_seconds }}" --certbot-dns-propagation-seconds "{{ certbot_dns_propagation_wait_seconds }}"
{% else %} {% else %}
--letsencrypt-webroot-path "{{ letsencrypt_webroot_path }}" --letsencrypt-webroot-path "{{ letsencrypt_webroot_path }}"
{% endif %} {% endif %}
{{ '--mode-test' if mode_test | bool else '' }} {{ '--mode-test' if mode_test | bool else '' }}
register: certbundle_result register: certbundle_result
changed_when: "'Certificate not yet due for renewal' not in certbundle_result.stdout" changed_when: "'Certificate not yet due for renewal' not in certbundle_result.stdout"
failed_when: > failed_when: >
certbundle_result.rc != 0 certbundle_result.rc != 0
and 'too many certificates' not in certbundle_result.stderr and 'too many certificates' not in certbundle_result.stderr
when: run_once_san_certs is not defined
- name: run the san tasks once - name: run the san tasks once
set_fact: set_fact:
run_once_san_certs: true run_once_san_certs: true
when: run_once_san_certs is not defined when: run_once_san_certs is not defined