ansible-role-letsencrypt
ansible-role-letsencrypt copied to clipboard
Ansible role for generating certificates with acme-tiny via Let’s encrypt
When renewing certificates I had the problem that my chained certificate wasn't updated as it only happens when running ansible. As my nginx is using the chained cert it should...
letsencrypt_user does not have permission to generate initial cert, it required password
an agreement url doesn't match error raised before I updated acme_tiny_commit
I realized that the best way to handle chained certs is to let the renewal script generate them. This ensures that chained certs will be regenerated whenever the main cert...
I am trying to run the role on an EC2 instance. By default it comes with an user ubuntu which can sudo. However it seems the role expects to be...
- leave out private key generation, or at least split it to another optional task file (possibly with `delegate_to: localhost`) (people may not like generating private key on production host)...
Currently, the role will always return at least one step as changed, making it look non-idempotent: The "generate the initial certificate" (which btw. should be renamed to use the plural)...