feat(role,pb,inv): new role for updating certificates on web-servers

2026-09-14 09:58:47 +04:00
parent 07b33028d1
commit 49bd2f630b
3 changed files with 39 additions and 0 deletions
@@ -0,0 +1,20 @@
+---
+- name: Fetch all certificates from cert-proxy
+  ansible.builtin.fetch:
+    src: /tmp/letsencrypt
+    dest: /tmp
+    when: "{{ inventory_hostname == 'cert-proxy' }}"
+
+- name: Push loki.vmn.su certificate to the target
+  ansible.builtin.copy:
+    src: /tmp/letsencrypt/live/loki.vmn.su/fullchain.pem
+    dest: /etc/nginx/certs/loki_fullchain.pem
+    local_follow: true
+    when: "{{ inventory_hostname == 'monitoring' }}"
+
+- name: Push loki.vmn.su key to the target
+  ansible.builtin.copy:
+    src: /tmp/letsencrypt/live/loki.vmn.su/privkey.pem
+    dest: /etc/nginx/certs/loki_privkey.pem
+    local_follow: true
+    when: "{{ inventory_hostname == 'monitoring' }}"