ansible-collection-famedly-.../tasks/letsencrypt.yml
2018-12-02 23:25:20 +01:00

26 lines
723 B
YAML

---
- name: ensure hook directory available
file:
name: /etc/letsencrypt/renewal-hooks/deploy/
state: directory
- name: template ssl post-renewal copier into place
template:
src: 01-synapse.j2
dest: /etc/letsencrypt/renewal-hooks/deploy/01-synapse
mode: 0700
register: ssl_renewal
- name: run post-renewal copier
command: /etc/letsencrypt/renewal-hooks/deploy/01-synapse
when: ssl_renewal.changed
tags:
- skip_ansible_lint # because of the when clause
- name: create DH parameters
command: openssl dhparam -out ssl/{{ matrix_synapse_domain }}.dh 2048
args:
creates: /opt/synapse/ssl/{{ matrix_synapse_domain }}.dh
chdir: /opt/synapse
become_user: synapse
become: true