evolix/ansible-roles
22
2
Fork 2
Code Issues 61 Pull requests 18 Releases 32 Wiki Activity
1401 commits 76 branches 56 tags 128 MiB
Commit graph

151 commits

Author SHA1 Message Date
Jérémy Lecour ce11c39ce4 evoacme: add a symlink for vhosts with old path 2018-03-30 18:45:26 +02:00
Jérémy Lecour 7385e2894e evoacme: fix version comparison for evoacme 2018-03-30 18:43:03 +02:00
Benoît S. a4a3569630 Show the certificate path when exiting with an error 2018-03-06 10:34:55 +01:00
Benoît S. cdaad871b3 Be sure to check the exit code of certbot 
If we use set -e but no -o pipefail with a pipe, the last command exit code is
used by set -e.

certbot | grep -v something

If the grep exit with a non-zero exit code, set -e stop the execution of the
script.  We don't care about that grep, so we now use the PIPESTATUS.
 2018-03-05 14:46:49 +01:00
Gregory Colpart fb6cb79b41 Keep read right on group for software with non-root access like OpenLDAP 2018-01-28 17:13:23 +01:00
Jérémy Lecour 19b2da5b92 evoacme: exclude typical certbot directories 2018-01-22 18:27:37 +01:00
Jérémy Lecour 8f88a48e15 evoacme cron task : improve readability 
* use long form options
* break line before pipe
 2018-01-03 10:12:14 +01:00
Benoît S. edf7bceee6 Add -r to xargs arguments 
Why? Because if there is no certificates in /etc/letsencrypt it will call
evoacme with no args, resulting in an error.
 2018-01-03 10:00:22 +01:00
Jérémy Lecour 37f701eb54 evoacme: typos 2017-12-08 10:22:32 +01:00
Jérémy Lecour 5980593470 evoacme: move nginx acme challenge conf 2017-12-08 09:46:16 +01:00
Jérémy Lecour 2ac7b60a39 evoacme: better documentation 2017-11-25 14:17:36 +01:00
Jérémy Lecour 708428d088 evoacme: store Nginx letsencrypt config file in snippets 2017-11-25 14:17:36 +01:00
Jérémy Lecour 375c3e6760 evoacme: crontab management 
* simply rename certbot script to disable it
* use "evoacme" as file name for our custom cron script
 2017-11-25 14:17:36 +01:00
Jérémy Lecour 7fee69ca22 evoacme: remove $() 2017-11-21 16:17:21 +01:00
Bruno TATU ad9a15827f evoacme: invert conditions in sed_cert_path_XXX() 2017-11-21 14:45:50 +01:00
Bruno TATU 9519e226e9 evoacme: remove double caret in sed pattern 2017-11-21 14:44:36 +01:00
Ludovic Poujol 49d3118976 evoacme: Fix nginx on deb9 for LE challenge 2017-11-16 16:00:27 +01:00
Jérémy Lecour 5c6c92ab69 evoacme: install hooks in a loop 2017-11-15 11:40:42 +01:00
Victor LABORIE ce3b5b7cbd evoacme: use xargs instead of while 2017-11-14 17:19:15 +01:00
Victor LABORIE b801bdb576 evoacme: use -printf instead of -exec basename 2017-11-14 17:01:51 +01:00
Victor LABORIE 1c48df025c Move /usr rw remount into remount-usr role 2017-11-07 13:34:05 +01:00
Victor LABORIE 0ef627e4bd evoacme: add dovecot hook 2017-11-06 11:04:26 +01:00
Victor LABORIE b0df53a6ee evoacme: add postix hook 2017-11-06 11:04:13 +01:00
Jérémy Lecour 2aa26e2d68 copy vhosts-domains script 2017-10-24 17:39:49 +02:00
Jérémy Lecour 608b0a5bbc evoacme: fix hooks tasks 2017-10-24 17:39:32 +02:00
Jérémy Lecour 330d500de6 evoacme: fix hooks execution 
Disable regex for grep with "-F"
 2017-10-24 17:38:59 +02:00
Jérémy Lecour 56e5cfc06d evoacme: directories must be owned by "acme" 2017-10-24 17:38:05 +02:00
Jérémy Lecour 131eac4499 Fix: return if file is not readable 2017-10-24 17:37:46 +02:00
Jérémy Lecour 0e5396faa7 change from CRON to QUIET 2017-10-24 17:37:15 +02:00
Jérémy Lecour 8567160596 evoacme: don't execute hooks with dots in file name 2017-10-20 10:15:12 +02:00
Jérémy Lecour 0ed1ca1356 evoacme: install hooks 2017-10-20 10:14:46 +02:00
Jérémy Lecour 1b50dfb0b3 evoacme: inline hooks calls + export variables 2017-10-19 23:23:51 +02:00
Jérémy Lecour 3d3e45faef evoacme: use local variable 2017-10-19 23:18:11 +02:00
Jérémy Lecour 4d6853f844 evoacme: use hooks after certificate creation 2017-10-19 22:21:18 +02:00
Jérémy Lecour 1fa4ccc338 make-csr: create important directories 2017-10-19 11:08:35 +02:00
Jérémy Lecour d2f86f7950 evoacme: check for arguments first 2017-10-19 11:08:16 +02:00
Jérémy Lecour 37cd22a466 evoacme: remove useless variables 2017-10-19 11:08:01 +02:00
Jérémy Lecour 266ac7fc07 evoacme: create important directories 2017-10-19 11:07:45 +02:00
Jérémy Lecour e47371f347 Use bash, for proper readonly/local support 
"readonly" is a safety bonus, but "local" is really important
not to overwrite variables from functions.
 2017-10-19 11:05:54 +02:00
Jérémy Lecour 4d3ed7ed97 evoacme: remove a debug statement 2017-10-19 07:59:55 +02:00
Gregory Colpart 34365a145c Typo: rename script 2017-10-19 01:39:08 +02:00
Jérémy Lecour 95e16287c8 Extract hook scripts for Apache and Nginx 2017-10-18 22:48:22 +02:00
Jérémy Lecour d8960e2afa simplify CSR generation 2017-10-18 00:44:04 +02:00
Jérémy Lecour cd8ea40336 readability and whitespaces 2017-10-18 00:43:33 +02:00
Jérémy Lecour 232648a9b0 readlink -> realpath 
better portability on BSD systems
 2017-10-18 00:42:15 +02:00
Jérémy Lecour beff333a1a Evoacme: big refactoring 
* debug messages are sent to stdout
* domains discovery from vhosts is extracted to "vhost-domains"
* fixes suggested by shellcheck
* variables are "local" or "readonly" wherever possible
 2017-10-17 14:46:37 +02:00
Jérémy Lecour 1941f9a3f9 evoacme: improve webserver config logic 2017-10-13 17:14:03 +02:00
Jérémy Lecour 2066a79f2e evoacme: exit after certbot in dry-run mode 2017-10-13 17:13:14 +02:00
Jérémy Lecour 350abe5787 evoacme: invert test logic 2017-10-13 14:05:05 +02:00
Jérémy Lecour baa5eae784 evoacme: add many tests 2017-10-13 12:46:40 +02:00