infra/ansible-role-certificates
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

add support to autrenew letsencrypt certificates, still testing

Browse source
This commit is contained in:
nd 2020-06-27 16:55:52 +02:00
parent 12895a364f
commit 0e0c634e37
No known key found for this signature in database
GPG key ID: 21B5CD4DEE3670E9
9 changed files with 179 additions and 23 deletions
Download patch file Download diff file Expand all files Collapse all files

21
README.md
View file

@ -74,14 +74,21 @@ backend_override: {}
# days of validity left on a certificate bevore it is renewed
remainingdays: 28
# challange type to use, can be:
# 'dns-01': use the dns challange and a custom power dns backend
# 'dns-01-manual': use the dns challange and manualy set the dns record
# 'http-01: use the http challange and deploy the challanges to a webserver
challange: dns-01
# challenge type to use, can be:
# 'dns-01': use the dns challenge and a custom powerdns backend
# 'dns-01-manual': use the dns challenge and manualy set the dns record
# 'http-01: use the http challenge and deploy the challenges to a webserver
challenge: dns-01
# servers to deploy a challange to
challangeserver: []
# servers to deploy a challenge to
challengeserver: []
# Automaticly renew certificates using a cronjob
# Only supports the following cases:
# * 'dns-01' challenge with the custom powerdns backend
# This setting musst be set the first time the certificate is requested, it can not be enabled later without first deleting the certificates.
# Requires a working mail setup with some sort of sendmail binary to send warnings if a certificate can not be renewed.
autorenew: False
```
#### Selfsigned