chrisfu/prole
1
0
Fork 0
mirror of https://github.com/dredx/prole.git synced 2026-09-24 17:34:31 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

fix(acme): replace fragile key-file regex selector with rejectattr

Browse Source 
selectattr with 'match' regex was returning empty sequence on this Ansible
version. Since each install entry has exactly two items (fullchain.cer +
key), rejectattr the fullchain to get the key — no regex needed.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
chrisfu 2026-05-06 15:57:57 -04:00
parent e0c96f47d4
commit 52f4053718
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
infrastructure/roles/acme/tasks/main.yml
View File

@ -94,7 +94,7 @@
-d {{ item.domain }} -d {{ item.domain }}
--home {{ acme_install_dir }} --home {{ acme_install_dir }}
--fullchain-file {{ (item.install | selectattr('src', 'equalto', 'fullchain.cer') | first).dest }} --fullchain-file {{ (item.install | selectattr('src', 'equalto', 'fullchain.cer') | first).dest }}
--key-file {{ (item.install | selectattr('src', 'match', '.*\\.key$') | first).dest }} --key-file {{ (item.install | rejectattr('src', 'equalto', 'fullchain.cer') | first).dest }}
loop: "{{ acme_certs }}" loop: "{{ acme_certs }}"
notify: reload prole ssl consumers notify: reload prole ssl consumers