aboutsummaryrefslogtreecommitdiff
path: root/roles/certbot/tasks/main.yml
blob: 02e8c0b0789f796ec1fd61e49839017150c69949 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
---
- name: Ensure Certbot and Nginx plugin are installed
  ansible.builtin.apt:
    name:
      - certbot
      - python3-certbot-nginx
    state: present

- name: Ensure certbot renewal timer is enabled and active
  ansible.builtin.systemd:
    name: certbot.timer
    enabled: true
    state: started

- name: Verify primary domain TLS certificate exists
  ansible.builtin.stat:
    path: "/etc/letsencrypt/live/{{ primary_domain }}/fullchain.pem"
  register: primary_cert

- name: Verify SearXNG domain TLS certificate exists
  ansible.builtin.stat:
    path: "/etc/letsencrypt/live/{{ searxng_domain }}/fullchain.pem"
  register: searxng_cert