diff options
| author | Elizabeth Hunt <elizabeth.hunt@simponic.xyz> | 2024-01-07 00:35:54 -0500 |
|---|---|---|
| committer | Elizabeth Hunt <elizabeth.hunt@simponic.xyz> | 2024-01-07 00:39:16 -0500 |
| commit | ae64628958a10362aa7c65050ca8ff2546220c95 (patch) | |
| tree | a8256e6c7e989709c7589cfc3c92f4d11f27753b /roles/private/tasks/main.yml | |
| parent | fb0b3914086484d9284426985984e2c1699ba557 (diff) | |
| download | oldinfra-ae64628958a10362aa7c65050ca8ff2546220c95.tar.gz oldinfra-ae64628958a10362aa7c65050ca8ff2546220c95.zip | |
add mail role!
Diffstat (limited to 'roles/private/tasks/main.yml')
| -rw-r--r-- | roles/private/tasks/main.yml | 6 |
1 files changed, 2 insertions, 4 deletions
diff --git a/roles/private/tasks/main.yml b/roles/private/tasks/main.yml index 5c4eb7e..65f544b 100644 --- a/roles/private/tasks/main.yml +++ b/roles/private/tasks/main.yml @@ -84,12 +84,10 @@ - name: reload nginx to activate sites service: name=nginx state=restarted -- name: add monthly letsencrypt cronjob for cert renewal based on hash of domain name to prevent hitting LE rate limits +- name: add daily letsencrypt cronjob for cert renewal based on hash of domain name to prevent hitting LE rate limits cron: name: "letsencrypt_renewal_{{ item.stdout }}" - day: "{{ '%02d' | format(1 + (item.stdout | hash('md5') | int(0, 16) % 27)) }}" - hour: "{{ (item.stdout | hash('md5') | int(0, 16) % 24 ) }}" - minute: "{{ (item.stdout | hash('md5') | int(0, 16) % 60 ) }}" + special_time: "daily" job: "REQUESTS_CA_BUNDLE=/usr/local/share/ca-certificates/{{ step_bootstrap_ca_url }}.crt letsencrypt renew --server https://{{ step_bootstrap_ca_url }}:{{ step_ca_port }}/acme/ACME/directory --cert-name {{ item.stdout }} -n --webroot -w /var/www/letsencrypt --agree-tos --email {{ step_acme_cert_contact }} && service nginx reload" loop: "{{ extracted_domains.results }}" when: item.stdout != "" |