xoxys.certbot/defaults/main.yml

48 lines
1.6 KiB
YAML
Raw Normal View History

---
2018-06-25 21:02:24 +00:00
certbot_initial_run_enabled: False
2018-06-22 20:03:31 +00:00
certbot_work_dir: /var/lib/letsencrypt
certbot_config_dir: /etc/letsencrypt
certbot_log_dir: /var/log/letsencrypt
2018-06-23 14:27:01 +00:00
certbot_plugin_dir: /etc/letsencrypt/plugins
certbot_environment:
2018-06-22 19:39:52 +00:00
- { name: "{{ certbot_work_dir }}", mode: '0755' }
- { name: "{{ certbot_config_dir }}", mode: '0755' }
- { name: "{{ certbot_log_dir }}", mode: '0700' }
2018-06-23 14:27:01 +00:00
- { name: "{{ certbot_plugin_dir }}", mode: '0755' }
certbot_user: root
2018-06-22 19:57:22 +00:00
certbot_preferred_challenges: dns
certbot_server: https://acme-v02.api.letsencrypt.org/directory
certbot_email: mail@example.com
certbot_rsa_key_size: 4096
2018-06-23 13:29:05 +00:00
certbot_domains:
- example.com
certbot_command_arguments:
- "certonly"
- "--agree-tos"
- "--manual"
- "--manual-auth-hook /path/to/authenticator.py"
- "--manual-cleanup-hook /path/to/cleanup.py"
- "--manual-public-ip-logging-ok"
- "-n"
- "-d {{ certbot_domains | join(',') }}"
2018-06-23 13:34:40 +00:00
2018-06-23 18:43:04 +00:00
# enable scheduling via cron
certbot_scheduler_enabled: True
2018-06-23 13:34:40 +00:00
# Use a file under /etc/cron.d
# Works onyl if certbot_user is root
# certbot_cronfile: certbot-letsencrypt
2018-06-23 14:27:01 +00:00
# Setup manual auth for core-networks api
certbot_core_networks_plugin_enabled: False
certbot_core_networks_plugin_repo: https://git.rknet.org/xoxys/certbot_dns_corenetworks.git
2018-06-23 16:28:23 +00:00
certbot_core_networks_base_dir: "{{ certbot_plugin_dir }}/certbot_dns_corenetworks"
2018-06-23 14:27:01 +00:00
certbot_core_networks_plugin_version: master
certbot_core_networks_api_host: https://beta.api.core-networks.de/
certbot_core_networks_api_user: myuser
certbot_core_networks_api_password: secure
certbot_core_networks_dns_zone: mydomain.com
2018-06-23 17:43:35 +00:00
certbot_core_networks_log_level: error