summaryrefslogtreecommitdiff
path: root/roles/web
diff options
context:
space:
mode:
authorDmitry Ilvokhin <d@ilvokhin.com>2024-01-06 18:57:53 +0000
committerDmitry Ilvokhin <d@ilvokhin.com>2024-01-06 18:57:53 +0000
commitce18a1206c9e6ca74177c8ca16e42efae934c00f (patch)
treebc9c2dd4f50aca92c7759bf0cd518a984f2ed340 /roles/web
parent6c781bb8b9b5dea1f3cdb75a6cbde2b9e8942e8c (diff)
downloadinfra-ce18a1206c9e6ca74177c8ca16e42efae934c00f.tar.gz
infra-ce18a1206c9e6ca74177c8ca16e42efae934c00f.tar.bz2
infra-ce18a1206c9e6ca74177c8ca16e42efae934c00f.zip
Make certbot a role
Diffstat (limited to 'roles/web')
-rw-r--r--roles/web/files/certbot/certbot.service6
-rw-r--r--roles/web/files/certbot/certbot.timer10
-rw-r--r--roles/web/handlers/main.yml1
-rw-r--r--roles/web/tasks/certbot.yml30
4 files changed, 0 insertions, 47 deletions
diff --git a/roles/web/files/certbot/certbot.service b/roles/web/files/certbot/certbot.service
deleted file mode 100644
index bea307c..0000000
--- a/roles/web/files/certbot/certbot.service
+++ /dev/null
@@ -1,6 +0,0 @@
-[Unit]
-Description=Let's Encrypt renewal
-
-[Service]
-Type=oneshot
-ExecStart=/usr/bin/certbot renew --agree-tos --deploy-hook "systemctl reload nginx"
diff --git a/roles/web/files/certbot/certbot.timer b/roles/web/files/certbot/certbot.timer
deleted file mode 100644
index 565b4ee..0000000
--- a/roles/web/files/certbot/certbot.timer
+++ /dev/null
@@ -1,10 +0,0 @@
-[Unit]
-Description=Renewal of Let's Encrypt's certificates
-
-[Timer]
-OnCalendar=daily
-OnCalendar=0/12:12:00
-Persistent=true
-
-[Install]
-WantedBy=timers.target
diff --git a/roles/web/handlers/main.yml b/roles/web/handlers/main.yml
deleted file mode 100644
index 58b30be..0000000
--- a/roles/web/handlers/main.yml
+++ /dev/null
@@ -1 +0,0 @@
-- ansible.builtin.import_tasks: roles/web/handlers/nginx.yml
diff --git a/roles/web/tasks/certbot.yml b/roles/web/tasks/certbot.yml
deleted file mode 100644
index d480a2d..0000000
--- a/roles/web/tasks/certbot.yml
+++ /dev/null
@@ -1,30 +0,0 @@
-- name: Install certbot packages
- ansible.builtin.package:
- name:
- - '{{ item }}'
- state: present
- loop:
- - certbot
- - certbot-nginx
-
-- name: Configure certbot systemd service
- ansible.builtin.copy:
- src: roles/web/files/certbot/certbot.service
- dest: /usr/lib/systemd/system
- owner: root
- group: root
- mode: u+rw,g+r,o+r
-
-- name: Configure certbot systemd timer
- ansible.builtin.copy:
- src: roles/web/files/certbot/certbot.timer
- dest: /usr/lib/systemd/system
- owner: root
- group: root
- mode: u+rw,g+r,o+r
-
-- name: Enable certbot systemd timer
- ansible.builtin.service:
- name: certbot.timer
- enabled: yes
- state: started