51 lines
1.1 KiB
YAML
51 lines
1.1 KiB
YAML
---
|
|
- name: Install nginx and certbot
|
|
apt:
|
|
name:
|
|
- nginx
|
|
- certbot
|
|
- python3-certbot-nginx
|
|
state: present
|
|
update_cache: true
|
|
|
|
- name: Remove default nginx site
|
|
file:
|
|
path: /etc/nginx/sites-enabled/default
|
|
state: absent
|
|
notify: Reload nginx
|
|
|
|
- name: Deploy homekeeper nginx config
|
|
template:
|
|
src: homekeeper.conf.j2
|
|
dest: /etc/nginx/sites-available/homekeeper.conf
|
|
mode: "0644"
|
|
notify: Reload nginx
|
|
|
|
- name: Enable homekeeper nginx site
|
|
file:
|
|
src: /etc/nginx/sites-available/homekeeper.conf
|
|
dest: /etc/nginx/sites-enabled/homekeeper.conf
|
|
state: link
|
|
notify: Reload nginx
|
|
|
|
- name: Obtain Let's Encrypt certificates
|
|
command: >
|
|
certbot --nginx -d {{ domain }} -d {{ gitea_domain }}
|
|
--non-interactive --agree-tos -m {{ gitea_admin_email }}
|
|
--redirect
|
|
args:
|
|
creates: /etc/letsencrypt/live/{{ domain }}/fullchain.pem
|
|
notify: Reload nginx
|
|
|
|
- name: Enable nginx
|
|
service:
|
|
name: nginx
|
|
enabled: true
|
|
state: started
|
|
|
|
handlers:
|
|
- name: Reload nginx
|
|
service:
|
|
name: nginx
|
|
state: reloaded
|