opendev/system-config
Code Issues Proposed changes
system-config/playbooks/roles/letsencrypt-create-certs
History
Ian Wienand 47a57e9939 letsencrypt: Fix graphite02 restart handler 
185797a0e5e46fd0f68f7b423e79f732c8541d68 made graphite01 (old server)
accidentally do the container restart; this should be for graphite02.

Change-Id: I881ffecf9af5ee07cc3ebcf34f0e204a6389d16b
2020-09-21 17:01:58 +10:00
..
defaults
letsencrypt: split staging and self-signed generation
2019-04-10 08:47:32 +10:00
handlers
letsencrypt: Fix graphite02 restart handler
2020-09-21 17:01:58 +10:00
tasks
Generate ssl check list directly from letsencrypt variables
2020-05-20 14:27:14 +10:00
README.rst
letsencrypt: split staging and self-signed generation
2019-04-10 08:47:32 +10:00

README.rst

Generate letsencrypt certificates

This must run after the letsencrypt-install-acme-sh, letsencrypt-request-certs and letsencrypt-install-txt-records roles. It will run the acme.sh process to create the certificates on the host.

Role Variables

If set to True, will locally generate self-signed certificates in the same locations the real script would, instead of contacting letsencrypt. This is set during gate testing as the authentication tokens are not available.

If set to True will use the letsencrypt staging environment, rather than make production requests. Useful during initial provisioning of hosts to avoid affecting production quotas.

The same variable as described in letsencrypt-request-certs.