d28bdb3258
Adds support for managing certificates manually and for having the playbook generate self-signed certificates for you. With this, Let's Encrypt usage is no longer required. Fixes Github issue #50.
23 lines
1.1 KiB
YAML
23 lines
1.1 KiB
YAML
---
|
|
|
|
- set_fact:
|
|
matrix_ssl_certificate_verification_cert_path: "{{ matrix_ssl_config_dir_path }}/live/{{ domain_name }}/fullchain.pem"
|
|
matrix_ssl_certificate_verification_cert_key_path: "{{ matrix_ssl_config_dir_path }}/live/{{ domain_name }}/privkey.pem"
|
|
|
|
- name: Check if SSL certificate file exists
|
|
stat:
|
|
path: "{{ matrix_ssl_certificate_verification_cert_path }}"
|
|
register: matrix_ssl_certificate_verification_cert_path_stat_result
|
|
|
|
- fail:
|
|
msg: "Failed finding a certificate file (for domain `{{ domain_name }}`) at `{{ matrix_ssl_certificate_verification_cert_path }}`"
|
|
when: "not matrix_ssl_certificate_verification_cert_path_stat_result.stat.exists"
|
|
|
|
- name: Check if SSL certificate key file exists
|
|
stat:
|
|
path: "{{ matrix_ssl_certificate_verification_cert_key_path }}"
|
|
register: matrix_ssl_certificate_verification_cert_key_path_stat_result
|
|
|
|
- fail:
|
|
msg: "Failed finding a certificate key file (for domain `{{ domain_name }}`) at `{{ matrix_ssl_certificate_verification_cert_key_path }}`"
|
|
when: "not matrix_ssl_certificate_verification_cert_key_path_stat_result.stat.exists" |