From 3b48e14243081f74bf497ad4af5cb2fc019e7b86 2023-12-14 20:46:16 From: x Date: 2023-12-14 20:46:16 Subject: [PATCH] fix: ansible errors in issue_cert --- diff --git a/web/tasks/issue_cert.yml b/web/tasks/issue_cert.yml index 37b788c5dbe084cda9f7dc507472e0747633a7fc..266aaa9aa3e1ce2adb40639b0aac5395329f0de7 100644 --- a/web/tasks/issue_cert.yml +++ b/web/tasks/issue_cert.yml @@ -15,6 +15,7 @@ register: acme_cert_dir - name: Pre-copy cert files ansible.builtin.copy: + remote_src: true src: "/etc/ssl/certs/ssl-cert-snakeoil.pem" dest: "/etc/ssl/certs/ssl-{{ item }}-{{ domain_name }}.pem" mode: '644' @@ -25,22 +26,23 @@ - cert - ca - fullchain - when: not acme_cert_dir.exists + when: not acme_cert_dir.stat.exists - name: Pre-copy key file ansible.builtin.copy: + remote_src: true src: "/etc/ssl/private/ssl-cert-snakeoil.key" dest: "/etc/ssl/private/ssl-cert-{{ domain_name }}.pem" mode: '640' owner: 'root' group: 'ssl-cert' become: true - when: not acme_cert_dir.exists + when: not acme_cert_dir.stat.exists - name: Issue certificate ansible.builtin.command: cmd: "/root/.acme.sh/acme.sh --issue --keylength ec-384 -w /var/www/acme_root/ {{ all_domain_names }}" become: true - when: not acme_cert_dir.exists + when: not acme_cert_dir.stat.exists register: cert_issued changed_when: cert_issued.rc == 0 - name: Deploy certs and keys