48 lines
1.1 KiB
YAML
48 lines
1.1 KiB
YAML
# vim:syntax=yaml
|
|
{%- from "acme/map.jinja" import acme with context %}
|
|
---
|
|
acmesh-install:
|
|
cmd.run:
|
|
- name: "curl https://get.acme.sh | sh"
|
|
- runas: root
|
|
- cwd: /root
|
|
- env:
|
|
- HOME: /root
|
|
- unless: /bin/bash -c "[[ -f /root/.acme.sh/acme.sh ]]"
|
|
|
|
acmesh-upgrade:
|
|
cmd.run:
|
|
- name: /root/.acme.sh/acme.sh --upgrade
|
|
- runas: root
|
|
- cwd: /root
|
|
- env:
|
|
- HOME: /root
|
|
- require:
|
|
- cmd: acmesh-install
|
|
|
|
acmesh-run:
|
|
cmd.run:
|
|
- name: >
|
|
/root/.acme.sh/acme.sh --debug --issue
|
|
{%- for domain in acme.domains %}
|
|
-d '{{ domain }}'
|
|
{% endfor -%}
|
|
--dns dns_ovh
|
|
--cert-file ''
|
|
--fullchain-file '{{ acme.fullcertfile }}'
|
|
--key-file '{{ acme.keyfile }}'
|
|
-k {{ acme.keysize }}
|
|
- env:
|
|
- OVH_AK: '{{ acme.provider.api.application_key }}'
|
|
- OVH_AS: '{{ acme.provider.api.application_secret }}'
|
|
- OVH_CK: '{{ acme.provider.api.consumer_key }}'
|
|
- HOME: '/root'
|
|
- success_retcodes:
|
|
- 0
|
|
- 1
|
|
- 2
|
|
- runas: root
|
|
- cwd: /root
|
|
- require:
|
|
- cmd: acmesh-install
|