Compare commits

...

2 commits

6 changed files with 4 additions and 99 deletions

View file

@ -1,4 +0,0 @@
[defaults]
nocows = 1
inventory = hosts.yml
vault_password_file = ~/.vault-password

View file

@ -1,6 +0,0 @@
all:
hosts:
vetinari.dreamfall.space:
ansible_become_password: "{{ lookup('community.general.keyring', 'ansible_vetinari thrrgilag') }}"
detritus.dreamfall.space:
ansible_become_password: "{{ lookup('community.general.keyring', 'ansible_detritus thrrgilag') }}"

View file

@ -1,22 +0,0 @@
---
- name: Install uacme rpm package
hosts: all
vars:
rpm_location: /home/thrrgilag/rpmbuild/RPMS/x86_64
rpm_file: uacme-1.7.3-1.x86_64.rpm
tasks:
- name: ping host
ansible.builtin.ping:
- name: upload rpm
ansible.builtin.copy:
src: "{{ rpm_location }}/{{ rpm_file }}"
dest: /tmp
- name: install rpm
ansible.builtin.dnf:
name: /tmp/{{ rpm_file }}
state: latest
disable_gpg_check: yes
become: yes

View file

@ -1,62 +0,0 @@
---
- name: Install uacme rpm package
hosts: all
tasks:
- name: ping host
ansible.builtin.ping:
- name: Install nginx uacme config
ansible.builtin.copy:
src: uacme.nginx
dest: /etc/nginx/default.d/uacme.conf
owner: root
group: root
become: yes
- name: Check uacme account
ansible.builtin.stat:
path: "/etc/uacme.d/private/key.pem"
register: uacme_account
become: yes
- name: Create uacme account
ansible.builtin.command: uacme -v -y -c /etc/uacme.d new
when: not uacme_account.stat.exists
become: yes
- name: Create acme-challenge directory
ansible.builtin.file:
path: /var/www/html/.well-known/acme-challenge
state: directory
mode: '0755'
owner: root
group: root
become: yes
- name: Touch ssl-hosts file
ansible.builtin.file:
path: /root/ssl-hosts.txt
state: touch
mode: '0644'
owner: root
group: root
become: yes
- name: Add uacme job to crontab
ansible.builtin.cron:
name: "uacme"
minute: "0"
hour: "3"
job: /root/bin/uacme-certs.sh
become: yes
- name: Allow nginx access to acme-challenge
community.general.sefcontext:
target: /var/www/html/.well-known/acme-challenge
setype: httpd_sys_content_t
become: yes
- name: Apply new SELinux file context to filesystem
ansible.builtin.command: restorecon -irv /var/www/html/.well-known/acme-challenge
become: yes

View file

@ -1,4 +0,0 @@
location /.well-known/acme-challenge {
alias /var/www/html/.well-known/acme-challenge;
try_files $uri $uri/ =404;
}

View file

@ -1,6 +1,6 @@
Name: uacme
Version: 1.7.3
Version: 1.7.4
Release: 1
Summary: Lightweight SSL certificate verification and issue client
@ -91,6 +91,9 @@ which uacme --version
%doc AUTHORS ChangeLog NEWS README THANKS
%changelog
* Tue Feb 28 2023 Morgan McMillian <morgan@mcmillian.dev> 1.7.4-1
- Update to uacme 1.7.4
* Thu Dec 08 2022 Morgan McMillian <morgan@mcmillian.dev> 1.7.3-1
- Update to uacme 1.7.3