Jérémy Lecour
65bc2c657d
All checks were successful
continuous-integration/drone/push Build is passing
38 lines
964 B
YAML
38 lines
964 B
YAML
---
|
|
|
|
- name: "System compatibility checks"
|
|
assert:
|
|
that:
|
|
- ansible_distribution == "Debian"
|
|
- ansible_distribution_major_version is version('9', '>=')
|
|
msg: only compatible with Debian 9+
|
|
|
|
- name: certbot package is installed
|
|
apt:
|
|
name: certbot
|
|
state: latest
|
|
|
|
- include: acme-challenge.yml
|
|
|
|
- name: Deploy hooks are present
|
|
copy:
|
|
src: hooks/
|
|
dest: /etc/letsencrypt/renewal-hooks/deploy/
|
|
mode: "0700"
|
|
owner: root
|
|
group: root
|
|
|
|
- name: Move commit-etc.sh to z-commit-etc.sh if present
|
|
command: "mv /etc/letsencrypt/renewal-hooks/deploy/commit-etc.sh /etc/letsencrypt/renewal-hooks/deploy/z-commit-etc.sh"
|
|
args:
|
|
removes: /etc/letsencrypt/renewal-hooks/deploy/commit-etc.sh
|
|
creates: /etc/letsencrypt/renewal-hooks/deploy/z-commit-etc.sh
|
|
|
|
- name: "certbot lock is ignored by Git"
|
|
lineinfile:
|
|
dest: /etc/.gitignore
|
|
line: letsencrypt/.certbot.lock
|
|
create: yes
|
|
owner: root
|
|
mode: "0600"
|