ansible-roles/ansible-role-certbot
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

remove nginx ssl config part
All checks were successful
continuous-integration/drone/push Build is passing
Details

Browse Source
This commit is contained in:
vincent 2022-02-20 15:27:26 +01:00
parent 3b992bf6d6
commit 4a00dbab13
3 changed files with 0 additions and 23 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
defaults/main.yml
View File

@ -5,7 +5,6 @@ certbot_auto_renew_user: "{{ ansible_user | default(lookup('env', 'USER')) }}"
certbot_auto_renew_hour: "3"
certbot_auto_renew_minute: "30"
certbot_auto_renew_options: "--quiet --no-self-upgrade"
certbot_nginx_conf_path: /etc/nginx/conf.d/
# Parameters used when creating new Certbot certs.
certbot_force: false
certbot_create_if_missing: false

12
tasks/create-cert-standalone.yml
View File

@ -45,15 +45,3 @@
openssl_dhparam:
path: /etc/letsencrypt/ssl-dhparams.pem
size: 2048
- name: ensure conf.d exist
file:
mode: 0750
path: "{{ certbot_nginx_conf_path }}"
state: directory
- name: create nginx config ssl file
template:
mode: 0750
dest: "{{ certbot_nginx_conf_path }}/{% if certbot_cert_name %}{{ certbot_cert_name }}{% else %}{{ cert_item.domains | first | replace('*.', '') }}{% endif %}.ssl"
src: nginx_ssl_config.j2

10
templates/nginx_ssl_config.j2
View File

@ -1,10 +0,0 @@
ssl_certificate /etc/letsencrypt/live/{% if certbot_cert_name %}{{certbot_cert_name}}{% else %}{{ cert_item.domains | first | replace('*.', '') }}{% endif %}/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/{% if certbot_cert_name %}{{certbot_cert_name}}{% else %}{{ cert_item.domains | first | replace('*.', '') }}{% endif %}/privkey.pem;
ssl_session_cache shared:le_nginx_SSL:10m;
ssl_session_timeout 1440m;
ssl_session_tickets off;
ssl_protocols TLSv1.2 TLSv1.3;
ssl_prefer_server_ciphers off;
ssl_ciphers "ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384";
ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;