Ansible
/
nginx
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Fix typo and bug with non letsencrypt certificate

This commit is contained in:
Dryusdan 2024-03-30 13:45:28 +01:00
parent 067abe425b
commit 5db4e2664e
3 changed files with 4 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
defaults/main.yml
View File

@ -25,3 +25,4 @@ listen_ipv4:
listen_ipv6:
- "::"

1
tasks/configure-vhost.yml
View File

@ -59,6 +59,7 @@
shell: "certbot certonly --non-interactive --webroot --email {{ nginx_letsencrypt_email }} --agree-tos --webroot-path=/var/www/letsencrypt {% for domain in item.server_name %} -d {{ domain }} {% endfor %} --expand --rsa-key-size 4096;"
when:
- item.ssl
- item.letsencrypt
- name: "Create certificate"
shell: "certbot certonly --non-interactive --webroot --email {{ nginx_letsencrypt_email }} --agree-tos --webroot-path=/var/www/letsencrypt {% for domain in item.server_name %} -d {{ domain }} {% endfor %} --expand --rsa-key-size 4096;"

4
templates/vhosts/partials/ssl.j2
View File

@ -13,10 +13,10 @@ ssl_certificate_key {{ item.ssl_certificate_key }};
{% endif %}
include /etc/nginx/conf.d/ssl.conf;
{% if item.disable_ocsp is defined and item.disable_ocsp is True %}
{% if item.disable_ocsp is defined and item.disable_ocsp == True %}
include /etc/nginx/conf.d/ocsp.conf;
{% endif %}
{% if item.disable_hsts is defined and item.disable_hsts is True %}
{% if item.disable_hsts is defined and item.disable_hsts == True %}
include /etc/nginx/conf.d/hsts.conf;
{% endif %}