kevinveenbirkenbachandClaude Opus 4.7
653636e656
Collapse the prior ~10 variants of galaxy_info.company (single-line,
multi-line single-quoted, multi-line double-quoted, escaped \n,
Unicode non-breaking hyphen, Birchenbach typo, block-scalar) into one
canonical block-scalar form across every roles/*/meta/main.yml that
declares the field:
company: |
Kevin Veen-Birkenbach
Consulting & Coaching Solutions
https://www.veen.world
Add tests/lint/ansible/roles/test_meta_company_canonical.py so future
drift fails CI immediately.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Webserver HTTPS Provisioning 🚀
Description
The sys-svc-webserver-https role extends a basic NGINX installation by wiring in everything you need to serve content over HTTPS:
- Ensures your NGINX server is configured for SSL/TLS.
- Pulls in Let’s Encrypt ACME challenge handling.
- Applies global cleanup of unused domain configs.
This role is built on top of your existing sys-svc-webserver-core role, and it automates the end-to-end process of turning HTTP sites into secure HTTPS sites.
Overview
When you apply sys-svc-webserver-https, it will:
- Include the
sys-svc-webserver-corerole to install and configure NGINX. - Clean up any stale vHost files under
sys-svc-cln-domains. - Deploy the Let’s Encrypt challenge-and-redirect snippet from
sys-svc-letsencrypt. - Reload NGINX automatically when any template changes.
All tasks are idempotent—once your certificates are in place and your configuration is set, Ansible will skip unchanged steps on subsequent runs.
Features
-
🔒 Automatic HTTPS Redirect
Sets up port 80 → 443 redirect and serves/.well-known/acme-challenge/for Certbot. -
🔑 Let’s Encrypt Integration
Pulls in challenge configuration and CAA-record management for automatic certificate issuance and renewal. -
🧹 Domain Cleanup
Removes obsolete or orphaned server blocks before enabling HTTPS. -
🚦 Handler-Safe
Triggers an NGINX reload only when necessary, minimizing service interruptions.
License
This role is released under the Infinito.Nexus Community License (Non-Commercial). See https://s.infinito.nexus/license for details.
Author
Developed and maintained by Kevin Veen-Birkenbach Consulting & Coaching Solutions https://www.veen.world