1
0
ansible-openappsec/roles/openappsec/tasks/nginx/dehydrated.yaml
2024-02-06 07:49:42 +01:00

46 lines
1.1 KiB
YAML

---
# install dehydrated
- name: 'install - dehydrated'
ansible.builtin.apt:
name: 'dehydrated'
state: 'present'
cache_valid_time: '120'
when: 'ansible_os_family == "Debian"'
# copy dehydrated configuration file from template
- name: 'revproxy - config - copy config from template'
ansible.builtin.copy:
src: 'files/dehydrated/config'
dest: '/etc/dehydrated/config'
owner: 'root'
group: 'root'
mode: '0644'
# copy dehydrated configuration file from template
- name: 'revproxy - config - copy domains.txt from template'
ansible.builtin.copy:
src: 'files/dehydrated/domains.txt'
dest: '/etc/dehydrated/domains.txt'
owner: 'root'
group: 'root'
mode: '0644'
# create dehydrated folder
- name: 'directory - dehydrated folder'
ansible.builtin.file:
path: '/mnt/certs/challenge'
state: 'directory'
owner: 'root'
group: 'root'
mode: '0755'
# symlink archive folder
- name: 'directory - dehydrated archive folder'
ansible.builtin.file:
src: '/mnt/certs/archive'
dest: '/etc/dehydrated/archive'
state: 'link'