From 5fe583541a0e182ccbaf170b8a0366f24dc964f1 Mon Sep 17 00:00:00 2001
From: Alan Orth <alan.orth@gmail.com>
Date: Sat, 6 Jul 2019 13:00:22 +0300
Subject: [PATCH] roles/nginx: Set Let's Encrypt packages for Debian 10

Taken from the list of packages that the certbot-auto script wants
to bootstrap on a fresh Debian 10 "buster" install.
---
 roles/nginx/tasks/letsencrypt.yml | 43 +++++++++++++++++++++++++++++++
 1 file changed, 43 insertions(+)

diff --git a/roles/nginx/tasks/letsencrypt.yml b/roles/nginx/tasks/letsencrypt.yml
index 7c0fb16..fc50727 100644
--- a/roles/nginx/tasks/letsencrypt.yml
+++ b/roles/nginx/tasks/letsencrypt.yml
@@ -14,6 +14,49 @@
   - name: Download certbot
     get_url: dest={{ letsencrypt_certbot_dest }} url=https://dl.eff.org/certbot-auto mode=700
 
+  # Dependencies certbot checks for on its first run. I set them in a fact so that
+  # I can pass the list directly to the apt module to install in one transaction.
+  - name: Set certbot dependencies (Debian 10)
+    when: ansible_distribution == 'Debian' and ansible_distribution_major_version is version_compare('10', '==')
+    set_fact:
+      certbot_dependencies:
+        - binutils
+        - binutils-common
+        - binutils-x86-64-linux-gnu
+        - cpp
+        - cpp-8
+        - gcc-8
+        - libasan5
+        - libatomic1
+        - libbinutils
+        - libc-dev-bin
+        - libc6-dev
+        - libcc1-0
+        - libexpat1-dev
+        - libgcc-8-dev
+        - libgomp1
+        - libisl19
+        - libitm1
+        - liblsan0
+        - libmpc3
+        - libmpfr6
+        - libmpx2
+        - libpython-dev
+        - libpython2-dev
+        - libpython2.7
+        - libpython2.7-dev
+        - libquadmath0
+        - libtsan0
+        - libubsan1
+        - linux-libc-dev
+        - python-pip-whl
+        - python-pkg-resources
+        - python2-dev
+        - python2.7-dev
+        - python3-distutils
+        - python3-lib2to3
+        - python3-virtualenv
+
   # Dependencies certbot checks for on its first run. I set them in a fact so that
   # I can pass the list directly to the apt module to install in one transaction.
   - name: Set certbot dependencies (Debian 9)