alanorth/ansible-personal
1
0
Fork 0
Code Issues 4 Pull Requests Projects Releases Wiki Activity

roles/nginx: Rework Let's Encrypt stuff

Browse Source 
Take an opinionated stance on HTTPS and assume that hosts are using
HTTPS for all vhosts. This can either be via custom TLS cert/key
pairs defined in the host's variables (could even be self-signed
certificates on dev boxes) or via Let's Encrypt.
This commit is contained in:
Alan Orth
2016-06-27 23:52:39 +03:00
parent 1254cea195
commit 0cd2735c82
6 changed files with 54 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
roles/nginx/defaults/main.yml
View File

@ -19,6 +19,9 @@ nginx_ssl_protocols: 'TLSv1 TLSv1.1 TLSv1.2'
# Directory root for Let's Encrypt certs
letsencrypt_root: /etc/letsencrypt/live
# Location of Let's Encrypt's certbot script
letsencrypt_certbot_dest: /opt/certbot-auto
# stable is 1.10.x
# mainline is 1.11.x
nginx_version: mainline