ivansible.cert_base

Common settings for Certbot and Let's Encrypt.

Requirements

None

Variables

Here are the available variables with their default values:

• certbot_group: ssl-cert
  Members of this Unix group can read the certificates. By default, it matches the group used by the ssl-cert package in Ubuntu.

• certbot_use_docker: ...
  Indicates if we're using Certbot in Docker or if it’s installed locally. The default depends on lin_use_docker.

• certbot_script: ...
  The default value depends on if we use Certbot in Docker or not. This can be a full path to the certbot or certbot-docker script.

• certbot_dir: /etc/letsencrypt
  Common directory for Let’s Encrypt configurations.

• certbot_lib_dir: /var/lib/letsencrypt
  Directory for storing Let’s Encrypt files.

• certbot_log_dir: /var/log/letsencrypt
  Directory where logs are stored.

• certbot_hook_dir: /etc/letsencrypt/renewal-hooks
  Directory for renewal hooks.

• certbot_post_dir: .../post or .../post-docker
  Subdirectory of certbot_hook_dir for scripts to run after renewal. The default varies depending on Docker usage.

Handlers

None

Tags

None

Dependencies

• ivansible.lin_base
  Includes common Ansible handlers and default settings.

Example Playbook

This role is intended to be a base for other roles to build upon.

License

MIT

Author Information

Created in 2021 by IvanSible