# Webserver HTTPS Provisioning 🚀

## Description
The **webserver-https** role extends a basic Nginx installation by wiring in everything you need to serve content over HTTPS:

1. Ensures your Nginx server is configured for SSL/TLS.
2. Pulls in Let’s Encrypt ACME challenge handling.
3. Applies global cleanup of unused domain configs.

This role is built on top of your existing `webserver-core` role, and it automates the end-to-end process of turning HTTP sites into secure HTTPS sites.

---

## Overview

When you apply **webserver-https**, it will:

1. **Include** the `webserver-core` role to install and configure Nginx.  
2. **Clean up** any stale vHost files under `cleanup-domains`.  
3. **Deploy** the Let’s Encrypt challenge-and-redirect snippet from `network-letsencrypt`.  
4. **Reload** Nginx automatically when any template changes.

All tasks are idempotent—once your certificates are in place and your configuration is set, Ansible will skip unchanged steps on subsequent runs.

---

## Features

- 🔒 **Automatic HTTPS Redirect**  
  Sets up port 80 → 443 redirect and serves `/.well-known/acme-challenge/` for Certbot.

- 🔑 **Let’s Encrypt Integration**  
  Pulls in challenge configuration and CAA-record management for automatic certificate issuance and renewal.

- 🧹 **Domain Cleanup**  
  Removes obsolete or orphaned server blocks before enabling HTTPS.

- 🚦 **Handler-Safe**  
  Triggers an Nginx reload only when necessary, minimizing service interruptions.

---

## Requirements

- A working `webserver-core` setup.
- DNS managed via Cloudflare (for CAA record tasks) or equivalent ACME DNS flow.
- Variables:
  - `certbot_webroot_path`  
  - `certbot_cert_path`  
  - `on_calendar_renew_lets_encrypt_certificates`

---

## License

This role is released under the **CyMaIS NonCommercial License (CNCL)**.
See [https://s.veen.world/cncl](https://s.veen.world/cncl) for details.

---

## Author

Developed and maintained by **Kevin Veen-Birkenbach**
Consulting & Coaching Solutions
[https://www.veen.world](https://www.veen.world)