ISTI-ansible-roles
/
ansible-role-openvpn
5
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Remove the letsencrypt hook when not needed.

This commit is contained in:
Andrea Dell'Amico 2021-09-30 19:22:01 +02:00
parent f801e837ba
commit 7b4f97dcd5
Signed by: adellam
GPG Key ID: 147ABE6CEB9E20FF
1 changed files with 16 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
tasks/letsencrypt-openvpn.yml
View File

@ -1,14 +1,24 @@
---
- name: Add the letsencrypt hook
block:
- name: Create the acme hooks directory if it does not yet exist
file: dest={{ letsencrypt_acme_services_scripts_dir }} state=directory owner=root group=root
- name: Install a script that fix the letsencrypt certificate for openvpn and then reload the service
copy: src=openvpn-letsencrypt-acme.sh dest={{ letsencrypt_acme_services_scripts_dir }}/openvpn owner=root group=root mode=4555
when:
- openvpn_letsencrypt_managed | bool
- letsencrypt_acme_install | bool
tags: [ 'openvpn', 'letsencrypt' ]
- name: Install a script that fix the letsencrypt certificate for openvpn and then reload the service
copy: src=openvpn-letsencrypt-acme.sh dest={{ letsencrypt_acme_services_scripts_dir }}/openvpn owner=root group=root mode=4555
- name: Remove the letsencrypt hook
block:
- name: Remove the letsencrypt hook for openvpn
file:
dest: '{{ letsencrypt_acme_services_scripts_dir }}/openvpn'
state: absent
when:
- openvpn_letsencrypt_managed | bool
- letsencrypt_acme_install | bool
- not openvpn_letsencrypt_managed
tags: [ 'openvpn', 'letsencrypt' ]