forked from CCCHH/ansible-infra
25 lines
874 B
Markdown
25 lines
874 B
Markdown
# Role `cert`
|
|
|
|
A role for ordering and renewing certificates from Lets Encrypt via ACME.
|
|
It uses the DNS challenge and fullfills it via a BIND 9 server given to the role.
|
|
|
|
## Supported Distributions
|
|
|
|
The following distributions are supported:
|
|
|
|
- Debian 11
|
|
|
|
## Required Arguments
|
|
|
|
For the required arguments look at the [`argument_specs.yaml`](./meta/argument_specs.yml)
|
|
|
|
## `hosts`
|
|
|
|
The `hosts` for this role need to be the machines on which you want to have the certificates.
|
|
|
|
## Links & Resources
|
|
|
|
- <https://docs.ansible.com/ansible/7/collections/community/crypto/acme_certificate_module.html>
|
|
- <https://docs.ansible.com/ansible/7/collections/community/crypto/openssl_privatekey_module.html>
|
|
- <https://docs.ansible.com/ansible/7/collections/community/crypto/openssl_csr_module.html>
|
|
- <https://eff-certbot.readthedocs.io/en/stable/using.html#where-are-my-certificates>
|