Let's Encrypt Role

Let's Encrypt Certificates

Tested with Nginx

This role is not standalone! You need to handle traffic forwarding on port 80 yourself.

location ~ /\.well-known/acme-challenge/ {
   root /var/www/letsencrypt/;
   index index.html index.htm;
   try_files $uri =404;
}

Example Configuration

letsencrypt_cert_list:
  - name: certificate1_fqdn
    mail: [email protected]

  - name: certificate2_fqdn
    altnames:
      - www.certificate2_fqdn
      - dev.certificate2_fqdn
    mail: [email protected]

  - name: certificate3_fqdn
    state: absent

Important Notes:

• altnames must be a list, not a single line string!
• If you want a more general solution, check out this Ansible role for Certbot.

Author

Jan Michalek