mirror of https://github.com/kevinveenbirkenbach/computer-playbook.git synced 2025-10-09 18:28:10 +02:00

Files

Kevin Veen-Birkenbach 23353ac878 infra(sys-service): centralize async control + pre-deploy backup safeguard

- Added MODE_BACKUP to trigger backup before the rest of the deployment

- sys-ctl-bkp-docker-2-loc: force linear sync and force flush when MODE_BACKUP is true

- Unified name resolution via system_service_name across handlers and tasks

- Introduced system_service_force_linear_sync and system_service_force_flush (rename from system_force_flush)

- Drive async/poll via system_service_async/system_service_poll using omit when disabled

- Propagated per-role overrides (cleanup, repair, cert tasks) for clarity and safety

- Minor formatting and consistency cleanups

Why: Ensure the backup runs before the deployment routine to safeguard data integrity.

Refs: Conversation https://chatgpt.com/share/68de4c41-b6e4-800f-85cd-ce6949097b5e
Signed-off-by: Kevin Veen-Birkenbach <kevin@veen.world>

2025-10-02 11:58:23 +02:00

README.md

Certbot Reaper

Description

This Ansible role automates the detection, revocation and deletion of unused Let's Encrypt certificates. It leverages the certreap tool to identify certificates no longer referenced by any active NGINX configuration and removes them automatically.

Overview

Installs the certreap cleanup tool using the pkgmgr-install role
Deploys and configures a systemd unit
(Optionally) Sets up a recurring cleanup via a systemd timer using the sys-timer role
Integrates with sys-ctl-alm-compose to send failure notifications
Ensures idempotent execution with a run_once_sys_ctl_cln_certs flag

Features

Certificate Cleanup Tool Installation
Uses pkgmgr-install to install the certreap binary.
Systemd Service Configuration
Deploys service and reloads/restarts it on changes.
Systemd Timer Scheduling
Optionally wires in a timer via the sys-timer role, controlled by the on_calendar_cleanup_certs variable.
Smart Execution Logic
Prevents multiple runs in one play by setting a run_once_sys_ctl_cln_certs fact.
Failure Notification
Triggers service on failure.

README.md

Certbot Reaper

Description

Overview

Features

Further Resources