2021-01-24 20:04:03 +01:00
|
|
|
# vim:syntax=yaml
|
|
|
|
|
{%- from "acme/map.jinja" import acme with context %}
|
2021-07-11 17:37:42 +02:00
|
|
|
---
|
2021-01-24 20:04:03 +01:00
|
|
|
acmesh-install:
|
|
|
|
|
cmd.run:
|
|
|
|
|
- name: "curl https://get.acme.sh | sh"
|
|
|
|
|
- runas: root
|
|
|
|
|
- cwd: /root
|
|
|
|
|
- env:
|
|
|
|
|
- HOME: /root
|
|
|
|
|
- unless: /bin/bash -c "[[ -f /root/.acme.sh/acme.sh ]]"
|
|
|
|
|
|
|
|
|
|
acmesh-upgrade:
|
|
|
|
|
cmd.run:
|
|
|
|
|
- name: /root/.acme.sh/acme.sh --upgrade
|
|
|
|
|
- runas: root
|
|
|
|
|
- cwd: /root
|
|
|
|
|
- env:
|
|
|
|
|
- HOME: /root
|
|
|
|
|
- require:
|
|
|
|
|
- cmd: acmesh-install
|
|
|
|
|
|
|
|
|
|
acmesh-run:
|
|
|
|
|
cmd.run:
|
|
|
|
|
- name: /root/.acme.sh/acme.sh --debug --issue {%- for domain in acme.domains %} -d '{{ domain }}' {% endfor -%} --dns dns_ovh --cert-file '' --fullchain-file '{{ acme.fullcertfile }}' --key-file '{{ acme.keyfile }}' -k {{ acme.keysize }}
|
|
|
|
|
- env:
|
|
|
|
|
- OVH_AK: '{{ acme.provider.api.application_key }}'
|
|
|
|
|
- OVH_AS: '{{ acme.provider.api.application_secret }}'
|
|
|
|
|
- OVH_CK: '{{ acme.provider.api.consumer_key }}'
|
|
|
|
|
- HOME: '/root'
|
|
|
|
|
- success_retcodes:
|
|
|
|
|
- 0
|
|
|
|
|
- 1
|
|
|
|
|
- 2
|
|
|
|
|
- runas: root
|
|
|
|
|
- cwd: /root
|
|
|
|
|
- require:
|
|
|
|
|
- cmd: acmesh-install
|
