diff --git a/ansible.cfg b/ansible.cfg deleted file mode 100644 index 7cdf4e7..0000000 --- a/ansible.cfg +++ /dev/null @@ -1,4 +0,0 @@ -[defaults] -nocows = 1 -inventory = hosts.yml -vault_password_file = ~/.vault-password diff --git a/hosts.yml b/hosts.yml deleted file mode 100644 index aa2da35..0000000 --- a/hosts.yml +++ /dev/null @@ -1,6 +0,0 @@ -all: - hosts: - vetinari.dreamfall.space: - ansible_become_password: "{{ lookup('community.general.keyring', 'ansible_vetinari thrrgilag') }}" - detritus.dreamfall.space: - ansible_become_password: "{{ lookup('community.general.keyring', 'ansible_detritus thrrgilag') }}" diff --git a/install.yml b/install.yml deleted file mode 100644 index cb513c7..0000000 --- a/install.yml +++ /dev/null @@ -1,22 +0,0 @@ ---- -- name: Install uacme rpm package - hosts: all - vars: - rpm_location: /home/thrrgilag/rpmbuild/RPMS/x86_64 - rpm_file: uacme-1.7.3-1.x86_64.rpm - - tasks: - - name: ping host - ansible.builtin.ping: - - - name: upload rpm - ansible.builtin.copy: - src: "{{ rpm_location }}/{{ rpm_file }}" - dest: /tmp - - - name: install rpm - ansible.builtin.dnf: - name: /tmp/{{ rpm_file }} - state: latest - disable_gpg_check: yes - become: yes diff --git a/setup.yml b/setup.yml deleted file mode 100644 index 16610ca..0000000 --- a/setup.yml +++ /dev/null @@ -1,62 +0,0 @@ ---- -- name: Install uacme rpm package - hosts: all - - tasks: - - name: ping host - ansible.builtin.ping: - - - name: Install nginx uacme config - ansible.builtin.copy: - src: uacme.nginx - dest: /etc/nginx/default.d/uacme.conf - owner: root - group: root - become: yes - - - name: Check uacme account - ansible.builtin.stat: - path: "/etc/uacme.d/private/key.pem" - register: uacme_account - become: yes - - - name: Create uacme account - ansible.builtin.command: uacme -v -y -c /etc/uacme.d new - when: not uacme_account.stat.exists - become: yes - - - name: Create acme-challenge directory - ansible.builtin.file: - path: /var/www/html/.well-known/acme-challenge - state: directory - mode: '0755' - owner: root - group: root - become: yes - - - name: Touch ssl-hosts file - ansible.builtin.file: - path: /root/ssl-hosts.txt - state: touch - mode: '0644' - owner: root - group: root - become: yes - - - name: Add uacme job to crontab - ansible.builtin.cron: - name: "uacme" - minute: "0" - hour: "3" - job: /root/bin/uacme-certs.sh - become: yes - - - name: Allow nginx access to acme-challenge - community.general.sefcontext: - target: /var/www/html/.well-known/acme-challenge - setype: httpd_sys_content_t - become: yes - - - name: Apply new SELinux file context to filesystem - ansible.builtin.command: restorecon -irv /var/www/html/.well-known/acme-challenge - become: yes diff --git a/uacme.nginx b/uacme.nginx deleted file mode 100644 index 002ba7f..0000000 --- a/uacme.nginx +++ /dev/null @@ -1,4 +0,0 @@ -location /.well-known/acme-challenge { - alias /var/www/html/.well-known/acme-challenge; - try_files $uri $uri/ =404; -}