Use letsencrypt staging server when testing

This commit is contained in:
Tunui Franken 2024-01-09 14:24:29 +01:00
parent ba2749b4a7
commit 4b2aa0db8a

View file

@ -14,7 +14,6 @@
state: present state: present
virtualenv: /etc/letsencrypt/certbot_dns_infomaniak_venv virtualenv: /etc/letsencrypt/certbot_dns_infomaniak_venv
- name: Copy authenticator credentials file - name: Copy authenticator credentials file
become: true become: true
ansible.builtin.copy: ansible.builtin.copy:
@ -24,10 +23,9 @@
owner: root owner: root
group: root group: root
- name: Perform dns-01 challenge - name: Set letsencrypt dns-01 challenge argv
become: true ansible.builtin.set_fact:
ansible.builtin.command: letsencrypt_dns01_challenge_argv:
argv:
- /etc/letsencrypt/certbot_dns_infomaniak_venv/bin/certbot - /etc/letsencrypt/certbot_dns_infomaniak_venv/bin/certbot
- certonly - certonly
- -n - -n
@ -35,8 +33,6 @@
- dns-infomaniak - dns-infomaniak
- --dns-infomaniak-credentials - --dns-infomaniak-credentials
- /etc/letsencrypt/infomaniak_credentials.ini - /etc/letsencrypt/infomaniak_credentials.ini
- --server
- https://acme-v02.api.letsencrypt.org/directory
- --rsa-key-size - --rsa-key-size
- 4096 - 4096
- -d - -d
@ -44,6 +40,16 @@
- -m - -m
- "{{ server_admin }}" - "{{ server_admin }}"
- --agree-tos - --agree-tos
- name: Set letsencrypt dns-01 challenge argv (staging)
when: ansible_hostname.endswith('-test')
ansible.builtin.set_fact:
letsencrypt_dns01_challenge_argv: "{{ letsencrypt_dns01_challenge_argv + ['--test-cert'] }}"
- name: Perform dns-01 challenge
become: true
ansible.builtin.command:
argv: "{{ letsencrypt_dns01_challenge_argv }}"
creates: "/etc/letsencrypt/live/{{ domain }}" creates: "/etc/letsencrypt/live/{{ domain }}"
- name: Create directory for certbot.service override - name: Create directory for certbot.service override