-
Notifications
You must be signed in to change notification settings - Fork 1
/
certbot.yml
65 lines (55 loc) · 1.62 KB
/
certbot.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
---
- hosts: webserver
become: yes
tasks:
- name: Turn off Apache listening on IP6
template:
src: ports.conf.j2
dest: "{{ apache_conf_path }}/ports.conf"
owner: root
group: root
mode: 0644
when: "'gamma' in inventory_hostname"
- name: Install certbot snap
snap:
name: certbot
classic: yes
when: env == "production"
- name: Symlink certbot executable
file:
src: /snap/bin/certbot
dest: /usr/bin/certbot
state: link
when: env == "production"
- name: Stop Apache to install certificates
service:
name: apache2
state: stopped
when: env == "production"
- name: Certbot setup
command: certbot --apache certonly --agree-tos --email "{{ certbot_admin_email }}" --noninteractive -d "{{ drupal_domain }}"
when: env == "production"
- name: Add PRODUCTION https config
template:
src: gamma.islandora-le-ssl.conf.j2
dest: "{{ apache_conf_path }}/sites-available/islandora-le-ssl.conf"
owner: root
group: root
mode: 0644
when: env == "production"
- name: Add PRODUCTION http config
template:
src: gamma.islandora.conf.j2
dest: "{{ apache_conf_path }}/sites-available/islandora.conf"
owner: root
group: root
mode: 0644
when: env == "production"
- name: Enable https site
command: a2ensite islandora-le-ssl.conf
when: env == "production"
- name: Start Apache
service:
name: apache2
state: started
when: env == "production"