Refactor the vault/secrets
This commit is contained in:
parent
11c339ce92
commit
28f2e9a33a
32 changed files with 144 additions and 83 deletions
|
|
@ -1,5 +1,6 @@
|
|||
---
|
||||
lego_host_certificates: "{{ host_services | services_get_attr('certificates') | flatten }}"
|
||||
lego_acmedns_registered: "{{ undef() }}"
|
||||
|
||||
lego_env:
|
||||
ACME_DNS_API_BASE: https://{{ acme_dns.host }}
|
||||
|
|
|
|||
|
|
@ -10,7 +10,7 @@
|
|||
- name: Create the acme-dns-accounts
|
||||
ansible.builtin.copy:
|
||||
dest: "{{ (lego_config_path, 'acme-dns-accounts.json') | path_join }}"
|
||||
content: '{{ vault_acmedns_registered | acmedns_to_lego | to_json }}'
|
||||
content: '{{ lego_acmedns_registered | acmedns_to_lego | to_json }}'
|
||||
mode: "0644"
|
||||
- name: Copy the hook script
|
||||
ansible.builtin.copy:
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue