prole/acme.yml at 998c1bc94d23a834ce82b946b3c07c87b5ba0bad - prole - Gitea: Git with a cup of tea

chrisfu/prole

mirror of https://github.com/dredx/prole.git synced 2026-09-24 16:04:31 +00:00

chrisfu 86990af9c8 feat(certs): add acme.sh DNS-01 role and cert-manager playbook for LE

- New acme role: installs acme.sh, issues certs for myrddin/merlin/gandalf
  via DNS-01 (name.com API), installs cert files to /etc/ssl/certs/prole/,
  sets up renewal cron. rc=2 (already valid) treated as ok.
- New playbooks/acme.yml: runs acme role on myrddin (issues all 3 host certs)
- New playbooks/certmgr.yml: cert-manager and letsencrypt-prod ClusterIssuer
  (HTTP-01/Traefik) for external endpoints (db/svc/api.prole.org)
- Add vault references for name.com API creds to group_vars/all/vars.yml
- Add prole_ssl_src_dir and prole_ssl_files to myrddin/merlin/gandalf host_vars

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-05-06 14:09:28 -04:00

7 lines

144 B

YAML

Raw Blame History

 ---
 - name: Issue and install internal host certs via acme.sh (DNS-01 / name.com)
   hosts: myrddin.prole.org
   become: true
   roles:
     - acme