410a915a8a
This paves the way for installing other roles into `roles/galaxy` using `ansible-galaxy`, similar to how it's done in: - https://github.com/spantaleev/gitea-docker-ansible-deploy - https://github.com/spantaleev/nextcloud-docker-ansible-deploy In the near future, we'll be removing a lot of the shared role code from here and using upstream roles for it. Some of the core `matrix-*` roles have already been extracted out into other reusable roles: - https://github.com/devture/com.devture.ansible.role.postgres - https://github.com/devture/com.devture.ansible.role.systemd_docker_base - https://github.com/devture/com.devture.ansible.role.timesync - https://github.com/devture/com.devture.ansible.role.vars_preserver - https://github.com/devture/com.devture.ansible.role.playbook_runtime_messages - https://github.com/devture/com.devture.ansible.role.playbook_help We just need to migrate to those.
28 lines
1.2 KiB
YAML
28 lines
1.2 KiB
YAML
---
|
|
|
|
- name: Check if a Let's Encrypt renewal configuration directory exists
|
|
ansible.builtin.stat:
|
|
path: "{{ matrix_ssl_config_dir_path }}/renewal"
|
|
register: matrix_ssl_config_renewal_directory_stat_result
|
|
|
|
- when: matrix_ssl_config_renewal_directory_stat_result.stat.exists | bool
|
|
block:
|
|
- name: Determine current Let's Encrypt renewal configs
|
|
ansible.builtin.find:
|
|
path: "{{ matrix_ssl_config_dir_path }}/renewal"
|
|
patterns: ".*.conf$"
|
|
use_regex: true
|
|
register: matrix_ssl_current_renewal_config_files
|
|
|
|
- name: Determine unnecessary Let's Encrypt renewal configs
|
|
ansible.builtin.set_fact:
|
|
matrix_ssl_current_renewal_config_files_to_purge: "{{ matrix_ssl_current_renewal_config_files_to_purge | default([]) + [item.path] }}"
|
|
with_items: "{{ matrix_ssl_current_renewal_config_files.files }}"
|
|
when: "item.path | basename | replace('.conf', '') not in matrix_ssl_domains_to_obtain_certificates_for"
|
|
|
|
- name: Purge unneceessary Let's Encrypt renewal config files
|
|
ansible.builtin.file:
|
|
path: "{{ item }}"
|
|
state: absent
|
|
with_items: "{{ matrix_ssl_current_renewal_config_files_to_purge | default([]) }}"
|