sync live and archive certs of fqdn

This commit is contained in:
Antonio J. Delgado 2023-01-29 09:59:31 +02:00
parent fcbc17286a
commit 4e39958093

View file

@ -76,6 +76,10 @@
key: "{{ item }}" key: "{{ item }}"
loop: "{{ lookup('file', '/tmp/pubkeys') | split('\n') }}" loop: "{{ lookup('file', '/tmp/pubkeys') | split('\n') }}"
- name: Synchronize certificates - name: Synchronize live certificates
shell: "rsync -ar -e 'ssh -p 7227 -o StrictHostKeyChecking=no' {{ mail_server_fqdn_ip }}:/etc/letsencrypt /etc/" shell: "rsync -ar -e 'ssh -p 7227 -o StrictHostKeyChecking=no' {{ mail_server_fqdn_ip }}:/etc/letsencrypt/live/{{ mail_server_fqdn }} /etc/letsencrypt/live/"
when: mail_server_fqdn_ip != node_external_ip
- name: Synchronize archive certificates
shell: "rsync -ar -e 'ssh -p 7227 -o StrictHostKeyChecking=no' {{ mail_server_fqdn_ip }}:/etc/letsencrypt/archive/{{ mail_server_fqdn }} /etc/letsencrypt/archive/"
when: mail_server_fqdn_ip != node_external_ip when: mail_server_fqdn_ip != node_external_ip