mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2025-08-30 07:18:09 +02:00
Kevin Veen-Birkenbach
f36c7831b1
- Added new filter plugin 'timeout_start_sec_for_domains' to calculate TimeoutStartSec based on number of domains. - Updated sys-ctl-hlth-csp and sys-ctl-hlth-webserver tasks to use the filter. - Removed obsolete systemctl.service.j2 in sys-ctl-hlth-csp. - Adjusted variable naming (CURRENT_PLAY_DOMAINS_ALL etc.) in multiple roles. - Updated srv-letsencrypt and sys-svc-certs to use uppercase vars. - Switched pretix role to sys-stk-full-stateful and removed leftover javascript.js. - Added unittests for the new filter under tests/unit/filter_plugins. See conversation: https://chatgpt.com/share/68b1ae9a-1ac0-800f-b49d-2915386a1a23
38 lines
1.6 KiB
YAML
38 lines
1.6 KiB
YAML
# Necessary to have this seperat file to pass performance tests
|
|
- name: Install certbundle
|
|
include_role:
|
|
name: pkgmgr-install
|
|
vars:
|
|
package_name: certbundle
|
|
|
|
- name: Generate SAN certificate with certbundle
|
|
command: >-
|
|
certbundle
|
|
--domains "{{ CURRENT_PLAY_DOMAINS_ALL | join(',') }}"
|
|
--certbot-email "{{ users.administrator.email }}"
|
|
--certbot-acme-challenge-method "{{ CERTBOT_ACME_CHALLENGE_METHOD }}"
|
|
--chunk-size 100
|
|
{% if CERTBOT_ACME_CHALLENGE_METHOD != 'webroot' %}
|
|
--certbot-credentials-file "{{ CERTBOT_CREDENTIALS_FILE }}"
|
|
--certbot-dns-propagation-seconds "{{ CERTBOT_DNS_PROPAGATION_WAIT_SECONDS }}"
|
|
{% else %}
|
|
--letsencrypt-webroot-path "{{ LETSENCRYPT_WEBROOT_PATH }}"
|
|
{% endif %}
|
|
{{ '--mode-test' if MODE_TEST | bool else '' }}
|
|
register: certbundle_result
|
|
changed_when: "'Certificate not yet due for renewal' not in certbundle_result.stdout"
|
|
failed_when: >
|
|
certbundle_result.rc != 0
|
|
and 'too many certificates' not in (certbundle_result.stderr | lower | default(''))
|
|
and 'the service is down for maintenance or had an internal error' not in (certbundle_result.stderr | lower | default(''))
|
|
|
|
- name: Warn if LetsEncrypt was down
|
|
when: "'the service is down for maintenance or had an internal error' in (certbundle_result.stderr | lower | default(''))"
|
|
debug:
|
|
msg: >
|
|
WARNING: Let's Encrypt responded with "service down for maintenance / internal error".
|
|
Certificate request skipped; please retry later.
|
|
|
|
- name: run the san tasks once
|
|
set_fact:
|
|
run_once_san_certs: true |