Certbot

This is a simple Certbot role for Ansible. I made it because the other options weren't exactly what I needed.

Like other roles, this helps you install Certbot using your package manager or with pip. You can also list multiple domains to get several certificates.

What makes this role different is that if you change the list of domains for a certificate, it will automatically renew with the updated list. This makes it easier to add more domains to a single certificate request.

Requirements

This role uses OpenSSL, so it will need to install the PyOpenSSL and Cryptography pip modules.

Role Variables

For variable details, check the documentation in defaults/main.yml.

Dependencies

There are no dependencies for this role.

Example Playbook

Here's how to install a certificate using a pip-installed Certbot:

- hosts: mygroup
  roles:
     - role: dudefellah.certbot
       certbot_pip_install: true
       certbot_certificates:
         - email: [email protected]
           domains:
             - me.myhost.com
             - myother.myhost.com
         - email: [email protected]
           domains:
             - myotherhost.com
             - myother.myotherhost.com

License

GPLv3

Author Information

Dan: https://github.com/dudefellah