Add nginx reload command on new cert for all VMs with certbot and nginx

inventories/chaosknoten/host_vars/grafana.yaml

@@ -11,6 +11,8 @@ certbot__version_spec: ""
 certbot__acme_account_email_address: le-admin@hamburg.ccc.de
 certbot__certificate_domains:
   - "grafana.hamburg.ccc.de"
+certbot__new_cert_commands:
+  - "systemctl reload nginx.service"
 
 nginx__version_spec: ""
 nginx__configurations:

inventories/chaosknoten/host_vars/hackertours.yaml

@@ -5,6 +5,8 @@ certbot__version_spec: ""
 certbot__acme_account_email_address: le-admin@hamburg.ccc.de
 certbot__certificate_domains:
   - "hackertours.hamburg.ccc.de"
+certbot__new_cert_commands:
+  - "systemctl reload nginx.service"
 
 nginx__version_spec: ""
 nginx__configurations:

inventories/chaosknoten/host_vars/keycloak.yaml

@@ -6,6 +6,8 @@ certbot__acme_account_email_address: j+letsencrypt-ccchh@jsts.xyz
 certbot__certificate_domains:
   - "id.hamburg.ccc.de"
   - "keycloak-admin.hamburg.ccc.de"
+certbot__new_cert_commands:
+  - "systemctl reload nginx.service"
 
 nginx__version_spec: ""
 nginx__configurations:

inventories/chaosknoten/host_vars/lists.yaml

@@ -5,6 +5,8 @@ certbot__version_spec: ""
 certbot__acme_account_email_address: j+letsencrypt-ccchh@jsts.xyz
 certbot__certificate_domains:
   - "lists.hamburg.ccc.de"
+certbot__new_cert_commands:
+  - "systemctl reload nginx.service"
 
 nginx__version_spec: ""
 nginx__configurations:

inventories/chaosknoten/host_vars/mumble.yaml

@@ -5,6 +5,8 @@ certbot__version_spec: ""
 certbot__acme_account_email_address: j+letsencrypt-ccchh@jsts.xyz
 certbot__certificate_domains:
   - "mumble.hamburg.ccc.de"
+certbot__new_cert_commands:
+  - "systemctl reload nginx.service"
 
 nginx__version_spec: ""
 nginx__configurations:

inventories/chaosknoten/host_vars/onlyoffice.yaml

@@ -7,6 +7,8 @@ certbot__version_spec: ""
 certbot__acme_account_email_address: j+letsencrypt-ccchh@jsts.xyz
 certbot__certificate_domains:
   - "onlyoffice.hamburg.ccc.de"
+certbot__new_cert_commands:
+  - "systemctl reload nginx.service"
 
 docker_compose__compose_file_content: "{{ lookup('ansible.builtin.template', 'chaosknoten/configs/onlyoffice/compose.yaml.j2') }}"
 docker_compose__configuration_files: [ ]

inventories/chaosknoten/host_vars/pad.yaml

@@ -5,6 +5,8 @@ certbot__version_spec: ""
 certbot__acme_account_email_address: le-admin@hamburg.ccc.de
 certbot__certificate_domains:
   - "pad.hamburg.ccc.de"
+certbot__new_cert_commands:
+  - "systemctl reload nginx.service"
 
 nginx__version_spec: ""
 nginx__configurations:

inventories/chaosknoten/host_vars/wiki.yaml

@@ -10,3 +10,5 @@ certbot__acme_account_email_address: j+letsencrypt-ccchh@jsts.xyz
 certbot__certificate_domains:
   - "wiki.ccchh.net"
   - "wiki.hamburg.ccc.de"
+certbot__new_cert_commands:
+  - "systemctl reload nginx.service"

inventories/chaosknoten/host_vars/zammad.yaml

@@ -10,3 +10,5 @@ nginx__version_spec: ""
 nginx__configurations:
   - name: zammad.hamburg.ccc.de
     content: "{{ lookup('ansible.builtin.file', 'chaosknoten/configs/zammad/nginx/zammad.hamburg.ccc.de.conf') }}"
+certbot__new_cert_commands:
+  - "systemctl reload nginx.service"

playbooks/roles/nextcloud/meta/main.yaml

@@ -6,6 +6,8 @@ dependencies:
       certbot__acme_account_email_address: "{{ nextcloud__certbot_acme_account_email_address }}"
       certbot__certificate_domains:
         - "{{ nextcloud__fqdn }}"
+      certbot__new_cert_commands:
+        - "systemctl reload nginx.service"
   - role: nginx
     vars:
       nginx__version_spec: "{{ nextcloud__nginx_version_spec }}"