aboutsummaryrefslogtreecommitdiff
path: root/gerboweb/deploy/playbook.yml
diff options
context:
space:
mode:
authorjaseg <code@jaseg.net>2019-03-28 01:50:07 +0900
committerjaseg <git@jaseg.net>2019-03-28 01:50:07 +0900
commit84148e368d3804c841d566cd0a8f28263445ef97 (patch)
tree4c718a75ea3ad42beccd64274562bd4a04b3d3bd /gerboweb/deploy/playbook.yml
parentdabe1d8809348cf82c82b9a871f0509e1403a8cd (diff)
downloadgerbolyze-84148e368d3804c841d566cd0a8f28263445ef97.tar.gz
gerbolyze-84148e368d3804c841d566cd0a8f28263445ef97.tar.bz2
gerbolyze-84148e368d3804c841d566cd0a8f28263445ef97.zip
gerboweb: Add HTTPS via letsencrypt
Diffstat (limited to 'gerboweb/deploy/playbook.yml')
-rw-r--r--gerboweb/deploy/playbook.yml17
1 files changed, 16 insertions, 1 deletions
diff --git a/gerboweb/deploy/playbook.yml b/gerboweb/deploy/playbook.yml
index eb4f367..3789c21 100644
--- a/gerboweb/deploy/playbook.yml
+++ b/gerboweb/deploy/playbook.yml
@@ -16,7 +16,7 @@
- name: Install host requisites
dnf:
- name: btrfs-progs,arch-install-scripts,nginx,uwsgi,python3-flask,python3-flask-wtf,systemd-container,uwsgi-plugin-python3
+ name: btrfs-progs,arch-install-scripts,nginx,uwsgi,python3-flask,python3-flask-wtf,systemd-container,uwsgi-plugin-python3,certbot,python3-certbot-nginx
state: latest
- name: Create container image filesystem
@@ -131,6 +131,21 @@
src: gerboweb-job-processor.service
dest: /etc/systemd/system/
+ - name: Set SELinux to permissive mode # FIXME
+ selinux:
+ state: permissive
+ policy: targeted
+
+ - name: Create letsencrypt certificate
+ command: certbot --nginx certonly -d gerbolyze.jaseg.net -n --agree-tos --email gerboweb@jaseg.net
+ args:
+ creates: /etc/letsencrypt/live/gerbolyze.jaseg.net/fullchain.pem
+
+ - name: Enable certbot renewal timer
+ systemd:
+ name: certbot-renew.timer
+ enabled: yes
+
- name: Enable uwsgi systemd socket
systemd:
daemon-reload: yes