2020-05-21 20:25:55 +02:00
|
|
|
acme_config_dir: /etc/ssl
|
2020-12-25 18:41:34 +01:00
|
|
|
acme_config_file: "{{ acme_config_dir }}/acme.yml"
|
2020-05-21 20:25:55 +02:00
|
|
|
acme_keys_dir: "{{ acme_config_dir }}/private"
|
|
|
|
acme_csr_dir: "{{ acme_config_dir }}/csr"
|
|
|
|
acme_certs_dir: "{{ acme_config_dir }}/certs"
|
|
|
|
acme_accounts_dir: "{{ acme_config_dir }}/accounts"
|
2020-12-25 18:41:34 +01:00
|
|
|
acme_script_dir: /opt/acme
|
|
|
|
acme_script_bin: /usr/local/bin/acme-renew-cert
|
|
|
|
|
2020-05-21 20:25:55 +02:00
|
|
|
acme_ssl_group: ssl-cert
|
2020-12-25 18:41:34 +01:00
|
|
|
acme_config:
|
|
|
|
account:
|
|
|
|
private_key: "{{ acme_accounts_dir }}/acme_account.key"
|
|
|
|
email: acme@example.com
|
|
|
|
owner: root
|
|
|
|
group: root
|
|
|
|
directory_url: https://acme-staging-v02.api.letsencrypt.org/directory
|
|
|
|
challenge_dir: /var/www/acme/.well-known/acme-challenge
|
|
|
|
domains:
|
|
|
|
example.com:
|
|
|
|
alt_names:
|
|
|
|
- test.example.com
|
|
|
|
owner: root
|
|
|
|
group: "{{ acme_ssl_group }}"
|
|
|
|
remaining_days: 30
|
|
|
|
hooks:
|
|
|
|
- systemctl reload nginx
|