diff options
| author | jaseg <code@jaseg.net> | 2019-03-28 01:50:07 +0900 |
|---|---|---|
| committer | jaseg <git@jaseg.net> | 2019-03-28 01:50:07 +0900 |
| commit | 30da6478a624bfdeb835eb106ef34860cd7e7c60 (patch) | |
| tree | cd801cb3b95def896b6549819fd97437c537c143 /playbook.yml | |
| parent | 295302ba9420e7b83e5053ea45d14601c1312e3f (diff) | |
| download | infra-30da6478a624bfdeb835eb106ef34860cd7e7c60.tar.gz infra-30da6478a624bfdeb835eb106ef34860cd7e7c60.tar.bz2 infra-30da6478a624bfdeb835eb106ef34860cd7e7c60.zip | |
gerboweb: Add HTTPS via letsencrypt
Diffstat (limited to 'playbook.yml')
| -rw-r--r-- | playbook.yml | 17 |
1 files changed, 16 insertions, 1 deletions
diff --git a/playbook.yml b/playbook.yml index eb4f367..3789c21 100644 --- a/playbook.yml +++ b/playbook.yml @@ -16,7 +16,7 @@ - name: Install host requisites dnf: - name: btrfs-progs,arch-install-scripts,nginx,uwsgi,python3-flask,python3-flask-wtf,systemd-container,uwsgi-plugin-python3 + name: btrfs-progs,arch-install-scripts,nginx,uwsgi,python3-flask,python3-flask-wtf,systemd-container,uwsgi-plugin-python3,certbot,python3-certbot-nginx state: latest - name: Create container image filesystem @@ -131,6 +131,21 @@ src: gerboweb-job-processor.service dest: /etc/systemd/system/ + - name: Set SELinux to permissive mode # FIXME + selinux: + state: permissive + policy: targeted + + - name: Create letsencrypt certificate + command: certbot --nginx certonly -d gerbolyze.jaseg.net -n --agree-tos --email gerboweb@jaseg.net + args: + creates: /etc/letsencrypt/live/gerbolyze.jaseg.net/fullchain.pem + + - name: Enable certbot renewal timer + systemd: + name: certbot-renew.timer + enabled: yes + - name: Enable uwsgi systemd socket systemd: daemon-reload: yes |