aboutsummaryrefslogtreecommitdiffstats
path: root/roles/certbot (follow)
Commit message (Collapse)AuthorAgeLines
* Move all ansible files to their own folderGravatar Chris Lovering2023-08-13-129/+0
|
* Remove explicit rrsync server start scriptGravatar Chris Lovering2023-07-24-18/+0
|
* Fix ansible-lint errorsGravatar chrislovering2023-07-24-4/+4
|
* Ensure renewal-hooks deploy directory exists before syncing certsGravatar chrislovering2023-07-24-0/+6
|
* Re-add previous ansible rolesGravatar Chris Lovering2023-07-24-0/+141
| | | | | | | Co-authored-by: Hassan Abouelela <[email protected]> Co-authored-by: Johannes Christ <[email protected]> Co-authored-by: Joe Banks <[email protected]> Co-authored-by: MarkKoz <[email protected]>
* Delete roles we won't use with self-hosted k8sGravatar Chris Lovering2022-10-18-141/+0
|
* Update extra SANGravatar Joe Banks2022-03-14-1/+1
|
* Force reload on all rsync operationsGravatar Joe Banks2022-03-14-2/+20
| | | | | | | | Update the forced command in authorized_keys to reload NGINX after termination of the rsync session. This ensures that after key updates complete they will be reloaded and pushed to NGINX.
* Add certbot rolesGravatar Joe Banks2022-03-14-0/+123
Add a certbot role that generates a certificate on the first host in the NGINX group and then deploys it to all other NGINX hosts. As of now we generate wildcard certs for pythondiscord.com and pydis.wtf. A unique SSH key is generated for each replica host which is restricted for security purposes. A deploy hook is installed to push renewals to other hosts.