dustin/configpolicy
1
1
Fork 0
Code Issues Releases Activity

roles/certbot: Set up Let's Encrypt certificates

Browse Source 
The *certbot* role installs and configures the `certbot` ACME client. It
adjusts the default configuration to allow the tool to run as an
unprivileged user, and then configures Apache to work with the *webroot*
plugin. It registers for an account and requests a certificate for the
domains specified by the `certbot_domains` Ansible variable. Finally, it
enables the *certbot-renew.timer* systemd unit to schedule automatic
renewal of all Let's Encrypt certificates.
This commit is contained in:
Dustin
2018-06-13 21:51:59 -05:00
parent efc6b62903
commit c6a50313dc
4 changed files with 142 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
roles/certbot/files/certbot.httpd.conf Normal file
View File

@@ -0,0 +1,9 @@
Alias /.well-known/acme-challenge /var/www/certbot/.well-known/acme-challenge
<IfModule mod_proxy.c>
ProxyPass /.well-known/acme-challenge !
</IfModule>
<Directory /var/www/certbot>
Require all granted
</Directory>