40 lines
1.4 KiB
YAML
40 lines
1.4 KiB
YAML
---
|
|
################################################################################
|
|
# Created Date: Sunday December 21st 2025
|
|
# Author: Aaron Johnson aaron.johnson@akamai.com
|
|
# -----
|
|
# Last Modified: Tuesday, 24th February 2026
|
|
# Modified By: the engineer formerly known as Aaron Johnson
|
|
# -----
|
|
# Copyright (c) 2025 Contact Author for details
|
|
# -----
|
|
# USAGE/DOCUMENTATION:
|
|
#
|
|
# -----
|
|
# INSTALLATION
|
|
#
|
|
# -----
|
|
# HISTORY:
|
|
# Date By Comments
|
|
# ---------- --- ---------------------------------------------------------
|
|
################################################################################
|
|
|
|
- name: Install certificate and generate PKCS#12 for Plex
|
|
become_user: "{{ acme_user }}"
|
|
shell: |
|
|
{{ acme_sh_path }} --install-cert \
|
|
-d {{ inventory_hostname }} \
|
|
--key-file {{ cert_dir }}/privkey.pem \
|
|
--fullchain-file {{ cert_dir }}/fullchain.pem \
|
|
--reloadcmd "
|
|
chmod 640 {{ cert_dir }}/privkey.pem {{ cert_dir }}/fullchain.pem &&
|
|
openssl pkcs12 -export \
|
|
-inkey {{ cert_dir }}/privkey.pem \
|
|
-in {{ cert_dir }}/fullchain.pem \
|
|
-out {{ cert_dir }}/{{ inventory_hostname }}.p12 \
|
|
-password pass:{{ pkcs12_password | default('ChangeMe123!') }} &&
|
|
sudo systemctl restart {{ plex_service | default('plex') }}
|
|
"
|
|
args:
|
|
creates: "{{ cert_dir }}/{{ inventory_hostname }}.p12"
|