Linode secrets.

master
Kaitlyn Parkhurst 3 years ago
parent 0a5efaeefc
commit e0e56a2e4a
  1. 22
      devops/ansible/roles/mjb-profile-certbot/tasks/main.yml

@ -52,6 +52,28 @@
line: "rsync -rLptgoD -e \"ssh -o StrictHostKeyChecking=no\" /etc/letsencrypt/live root@{{ item }}:/etc/letsencrypt"
with_items: "{{ deploy_addresses }}"
- name: Create /etc/letsencrypt/.secrets/
file:
state: directory
path: /etc/letsencrypt/.secrets
owner: root
group: root
mode: 0750
- name: Create /etc/letsencrypt/.secrets/linode.ini
file:
state: touch
path: /etc/letsencrypt/.secrets/linode.ini
owner: root
group: root
mode: 0644
- name: "Populatge linode secrets"
lineinfile:
path: /etc/letsencrypt/.secrets/linode.ini
line: "{{ item }}"
with_items: "{{ linode_dns_credentials }}"
- name: Create keypair for syncing
openssh_keypair:
path: "/root/.ssh/id_rsa"

Loading…
Cancel
Save