From 3b3c628492ff0862cab44cd9669b53edffd7f1e7 Mon Sep 17 00:00:00 2001
From: julian <julian@jsts.xyz>
Date: Thu, 3 Aug 2023 04:15:03 +0200
Subject: [PATCH] Ensure NGINX deploy. on public-rev.-prox. hosts before
 certbot role runs

---
 inventories/z9/hosts.yaml | 3 +++
 playbooks/deploy.yaml     | 7 ++++++-
 2 files changed, 9 insertions(+), 1 deletion(-)

diff --git a/inventories/z9/hosts.yaml b/inventories/z9/hosts.yaml
index 8629c0c..51fc978 100644
--- a/inventories/z9/hosts.yaml
+++ b/inventories/z9/hosts.yaml
@@ -49,6 +49,9 @@ all:
         keycloak:
         wiki:
         engelsystem:
+    public_reverse_proxy_hosts:
+      hosts:
+        public-reverse-proxy:
     cert_hosts:
       hosts:
     certbot_hosts:
diff --git a/playbooks/deploy.yaml b/playbooks/deploy.yaml
index 78d6ab7..e48a20d 100644
--- a/playbooks/deploy.yaml
+++ b/playbooks/deploy.yaml
@@ -57,6 +57,11 @@
   roles:
     - cert
 
+- name: Ensure NGINX deployment on nginx_hosts, which are also public_reverse_proxy_hosts, before certbot role runs
+  hosts: nginx_hosts:&public_reverse_proxy_hosts
+  roles:
+    - nginx
+
 - name: Ensure certbot and certificate deployment on certbot_hosts
   hosts: certbot_hosts
   roles:
@@ -68,7 +73,7 @@
     - docker_compose
 
 - name: Ensure NGINX deployment on nginx_hosts
-  hosts: nginx_hosts
+  hosts: nginx_hosts:!public_reverse_proxy_hosts
   roles:
     - nginx