From 12711afac9d416b91cc1b30b747c7b941d826940 Mon Sep 17 00:00:00 2001
From: Alan Orth <alan.orth@gmail.com>
Date: Wed, 25 Apr 2018 19:40:33 +0300
Subject: [PATCH] roles/nginx: Add dependencies for certbot on Ubuntu 18.04

Taken from running the Let's Encrypt certbot-auto client on a freshly
installed Ubuntu 18.04 system.
---
 roles/nginx/defaults/main.yml     | 45 +++++++++++++++++++++++++++++++
 roles/nginx/tasks/letsencrypt.yml |  7 +++++
 2 files changed, 52 insertions(+)

diff --git a/roles/nginx/defaults/main.yml b/roles/nginx/defaults/main.yml
index c34521a..e30573d 100644
--- a/roles/nginx/defaults/main.yml
+++ b/roles/nginx/defaults/main.yml
@@ -30,4 +30,49 @@ letsencrypt_certbot_dest: /opt/certbot-auto
 # mainline is 1.15.x
 nginx_version: mainline
 
+# Dependencies of certbot-auto on Ubuntu 18.04 "bionic"
+# taken after running certbot-auto on a clean install
+letsencrypt_ubuntu_bionic_deps:
+  - augeas-lenses
+  - binutils
+  - binutils-common
+  - binutils-x86-64-linux-gnu
+  - cpp
+  - cpp-7
+  - gcc
+  - gcc-7
+  - gcc-7-base
+  - libasan4
+  - libatomic1
+  - libaugeas0
+  - libbinutils
+  - libc-dev-bin
+  - libc6-dev
+  - libcc1-0
+  - libcilkrts5
+  - libexpat1-dev
+  - libffi-dev
+  - libgcc-7-dev
+  - libgomp1
+  - libisl19
+  - libitm1
+  - liblsan0
+  - libmpc3
+  - libmpx2
+  - libpython-dev
+  - libpython2.7
+  - libpython2.7-dev
+  - libquadmath0
+  - libssl-dev
+  - libtsan0
+  - libubsan0
+  - linux-libc-dev
+  - python-dev
+  - python-pip-whl
+  - python-pkg-resources
+  - python-virtualenv
+  - python2.7-dev
+  - python3-virtualenv
+  - virtualenv
+
 # vim: set ts=2 sw=2:
diff --git a/roles/nginx/tasks/letsencrypt.yml b/roles/nginx/tasks/letsencrypt.yml
index 7c1c91b..e98ba25 100644
--- a/roles/nginx/tasks/letsencrypt.yml
+++ b/roles/nginx/tasks/letsencrypt.yml
@@ -57,6 +57,13 @@
     - zlib1g-dev
   tags: packages
 
+- name: Install certbot dependencies (Ubuntu 18.04)
+  when: ansible_distribution == 'Ubuntu' and ansible_distribution_version is version_compare('18.04', '==')
+  apt: name={{ letsencrypt_ubuntu_bionic_deps }} state=present update_cache=yes
+  tags:
+    - packages
+    - letsencrypt
+
 # dependencies certbot checks for on its first run
 # taken from running certbot right after a clean Debian 9 install
 - name: Install certbot dependencies (Debian 9)