Update: get ssl cert

2026-09-23 00:07:38 +05:00
parent beb3141c24
commit f457c51dcb
13 changed files with 102 additions and 2 deletions
@@ -0,0 +1,35 @@
+- name: Проверка наличия SSL сертификата
+  ansible.builtin.stat:
+    path: "/etc/letsencrypt/live/{{ domain }}/fullchain.pem"
+  register: cert_status
+
+- name: Собрать факты о сервисах
+  ansible.builtin.service_facts:
+  when: not cert_status.stat.exists
+
+- name: Остановить nginx (если запущен) перед получением сертификата
+  ansible.builtin.service:
+    name: nginx
+    state: stopped
+  when:
+    - not cert_status.stat.exists
+    - "'nginx.service' in services"
+    - "services['nginx.service'].state == 'running'"
+
+- name: Получение SSL сертификата через --standalone
+  ansible.builtin.command: >
+    certbot certonly --standalone
+    --non-interactive --agree-tos
+    -m "{{ email }}"
+    -d "{{ domain }}"
+  when: not cert_status.stat.exists
+  notify: Restart nginx
+
+- name: Запустить nginx
+  ansible.builtin.service:
+    name: nginx
+    state: started
+  when:
+    - not cert_status.stat.exists
+    - "'nginx.service' in services"
+    - "services['nginx.service'].state == 'running'"