50 lines
1.4 KiB
YAML
50 lines
1.4 KiB
YAML
---
|
|
################################################################################
|
|
# Created Date: Sunday December 21st 2025
|
|
# Author: Aaron Johnson aaron.johnson@akamai.com
|
|
# -----
|
|
# Last Modified: Tuesday, 24th February 2026
|
|
# Modified By: the engineer formerly known as Aaron Johnson
|
|
# -----
|
|
# Copyright (c) 2025 Contact Author for details
|
|
# -----
|
|
# USAGE/DOCUMENTATION:
|
|
#
|
|
# -----
|
|
# INSTALLATION
|
|
#
|
|
# -----
|
|
# HISTORY:
|
|
# Date By Comments
|
|
# ---------- --- ---------------------------------------------------------
|
|
################################################################################
|
|
|
|
|
|
- name: Issue certificate
|
|
shell: |
|
|
. {{ acme_home }}/godaddy.env
|
|
export ACME_DEFAULT_DNS_TIMEOUT=180
|
|
export ACME_RETRY=10
|
|
export ACME_SLEEP=15
|
|
{{ acme_home }}/.acme.sh/acme.sh --server letsencrypt --issue --dns dns_gd -d {{ inventory_hostname }}
|
|
become_user: "{{ acme_user }}"
|
|
args:
|
|
creates: "{{ acme_home }}/.acme.sh/{{ inventory_hostname }}_ecc/fullchain.cer"
|
|
when: hostvars[inventory_hostname].gd_key is defined
|
|
|
|
- name: Install renewal service
|
|
template:
|
|
src: acme-renew.service.j2
|
|
dest: /etc/systemd/system/acme-renew.service
|
|
|
|
- name: Install renewal timer
|
|
template:
|
|
src: acme-renew.timer.j2
|
|
dest: /etc/systemd/system/acme-renew.timer
|
|
|
|
- name: Enable renewal timer
|
|
systemd:
|
|
name: acme-renew.timer
|
|
enabled: yes
|
|
state: started
|