Requirements

1. You need to have Ansible installed. You can do this with the following commands:

sudo apt install python3
python3 -m ensurepip --upgrade
pip3 install ansible

Required Variables

Check the variables you need to set, as shown below.

certbot_email: ""  # Your email address
certbot_domains: []  # List of domains for the certificate
certbot_hooks: []  # Scripts to run when getting a new certificate

certbot_verbose: false  # Set to true for more detailed output
certbot_dry_run: false  # Set to true for a test run without changes
certbot_hooks_enabled: true  # Enable hooks if set to true

The Ansible playbook will check if these variables are set before it runs.

Example Playbook

hosts:
  - foo  # Replace 'foo' with your host
roles:
  - pimvh.certbot  # The role that handles certbot

TLDR - What Will Happen if You Run This

• It will set up the systemd-failmail service to send emails when there is a failure.
• It will check if necessary rules and variables are defined.
• It will install Certbot.
• It will install any hooks you requested.
• It will edit and enable the systemd service for Certbot.

Future Improvements

• Add support for more types of hooks.