mirror of
https://github.com/dredx/prole.git
synced 2026-09-24 14:04:31 +00:00
86990af9c8
- New acme role: installs acme.sh, issues certs for myrddin/merlin/gandalf via DNS-01 (name.com API), installs cert files to /etc/ssl/certs/prole/, sets up renewal cron. rc=2 (already valid) treated as ok. - New playbooks/acme.yml: runs acme role on myrddin (issues all 3 host certs) - New playbooks/certmgr.yml: cert-manager and letsencrypt-prod ClusterIssuer (HTTP-01/Traefik) for external endpoints (db/svc/api.prole.org) - Add vault references for name.com API creds to group_vars/all/vars.yml - Add prole_ssl_src_dir and prole_ssl_files to myrddin/merlin/gandalf host_vars Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
28 lines
860 B
YAML
28 lines
860 B
YAML
---
|
|
acme_install_dir: /opt/acme.sh
|
|
acme_email: "admin@prole.org"
|
|
acme_namecom_username: ""
|
|
acme_namecom_token: ""
|
|
|
|
# Certs to issue and where to install them on the host.
|
|
# src paths are relative to the acme.sh cert dir for each domain.
|
|
acme_certs:
|
|
- domain: myrddin.prole.org
|
|
install:
|
|
- src: fullchain.cer
|
|
dest: /etc/ssl/certs/prole/myrddin-registry.crt
|
|
- src: myrddin.prole.org.key
|
|
dest: /etc/ssl/certs/prole/myrddin-registry.key
|
|
- domain: merlin.prole.org
|
|
install:
|
|
- src: fullchain.cer
|
|
dest: /etc/ssl/certs/prole/merlin.crt
|
|
- src: merlin.prole.org.key
|
|
dest: /etc/ssl/certs/prole/merlin.key
|
|
- domain: gandalf.prole.org
|
|
install:
|
|
- src: fullchain.cer
|
|
dest: /etc/ssl/certs/prole/gandalf.crt
|
|
- src: gandalf.prole.org.key
|
|
dest: /etc/ssl/certs/prole/gandalf.key
|