Ansible roles
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

64 lines
1.9 KiB

---
# Set the API endpoint to use. Default is to use https://acme-v02.api.letsencrypt.org/directory
# letsencrypt_ca: https://acme-staging.api.letsencrypt.org/directory
# letsencrypt_key_size: 4096
# letsencrypt_renew_days: 30
# Can be rsa, prime256v1 or secp384r1
# letsencrypt_key_algo: rsa
# letsencrypt_auto_renew: True
# letsencrypt_revoke_old_certs: False
#
letsencrypt_challenge: http
# If you want to use dns-01 challenges
# letsencrypt_challenge: dns
# letsencrypt_dns_provider: gandi
# letsencrypt_dns_provider_options: '--api-protocol=rest'
# letsencrypt_dns_auth_token: XXXX
#
# letsencrypt_certs:
# - common_name: www.domain.org
# alt_names:
# - www1.domain.org
# - m.domain.org
# - foo.domain.org
# - common_name: mail.domain.com
# - common_name: ldap.domain.com
# alt_names:
# - directory.domain.com
letsencrypt_base_hooks:
clean_challenge: |
#!/bin/bash -e
# Managed by ansible, manual modifications will be lost
deploy_cert: |
#!/bin/bash -e
# Managed by ansible, manual modifications will be lost
deploy_challenge: |
#!/bin/bash -e
# Managed by ansible, manual modifications will be lost
exit_hook: |
#!/bin/bash -e
# Managed by ansible, manual modifications will be lost
generate_csr: |
#!/bin/bash -e
# Managed by ansible, manual modifications will be lost
invalid_challenge: |
#!/bin/bash -e
# Managed by ansible, manual modifications will be lost
request_failure: |
#!/bin/bash -e
# Managed by ansible, manual modifications will be lost
startup_hook: |
#!/bin/bash -e
# Managed by ansible, manual modifications will be lost
unchanged_cert: |
#!/bin/bash -e
# Managed by ansible, manual modifications will be lost
letsencrypt_extra_hooks: {}
letsencrypt_hooks: "{{ letsencrypt_base_hooks | combine(letsencrypt_extra_hooks, recursive=True) }}"
...