initial commit

defaults/main.yml

@@ -0,0 +1,57 @@
+# compile acme-client when source repo changed
+acme_compile: true
+
+# add renew_script with reload commands
+acme_renew_script: true
+
+# set true to only run acme-client for all configured domains
+acme_justrun: false
+
+# add cronjob for renew_script or every configured domain if
+# acme_renew_script is set to false
+acme_add_cronjob: true
+
+src_dir: /usr/local/src
+acme_renew_script_path: /usr/local/sbin
+
+acme_build_dependencies_apt:
+  - git
+  - automake
+  - autotools-dev
+  - libbsd-dev
+  - bison
+  - libssl-dev
+
+acme_build_dependencies_zypper:
+  - git
+  - autoconf
+  - automake
+  - make
+  - gcc
+  - openssl-devel
+  - bison
+
+acme_authorities:
+  - name: letsencrypt
+    key: "/etc/ssl/private/acme_authority.key"
+    api_url: "https://acme-v02.api.letsencrypt.org/directory"
+
+# For testing prupose its recommended to use the staging url
+# https://acme-staging-v02.api.letsencrypt.org/directory
+
+acme_hosts: []
+#  - domain: www.exmaple.com
+#    alt_names:
+#      - example.com
+#      - git.exmaple.com
+#    key: "/etc/ssl/private/example.com.key"
+#    cert: "path_cert"
+#    chain_cert: "chain_cert"
+#    full_chain_cert: "full_cert"
+#    challengedir: /var/www/acme/example.com
+#    authority: letsencrypt
+#    reload_command: "systemctl reload nginx"
+#  - domain: www.doamin2.com
+#    key: "/etc/ssl/private/domain2.com.key"
+#    cert: "path_cert"
+#    full_chain_cert: "full_cert"