Switch caddy acme ca to zerossl

playbooks/roles/acme_dns/defaults/main.yml

@@ -2,6 +2,9 @@
 acme_dns_svc:
   domain: "{{ all_services | service_get_domain(service_name) }}"
   port: 80
+  caddy_extra:
+    # otherwise we have a dependency-loop with the wildcard, which needs this service
+    tls force_automate
   nsadmin: "{{ admin_email | regex_replace('@', '.') }}"
   records:
     a: "{{ ansible_facts.default_ipv4.address }}"

playbooks/roles/caddy/defaults/main.yml

@@ -3,6 +3,8 @@ caddy_acmedns_user: "{{ undef() }}"
 caddy_acmedns_pass: "{{ undef() }}"
 caddy_acmedns_subd: "{{ undef() }}"
 caddy_acmedns_url: "https://{{ acme_dns.host }}"
+caddy_acme_eab_key_id: "{{ undef() }}"
+caddy_acme_eab_mac_key: "{{ undef() }}"
 
 caddy_ports: "{{ host_services | services_get_attr('ports') | flatten | services_ports_to_docker('reverse_proxy') }}"
 

playbooks/roles/caddy/templates/Caddyfile.j2

@@ -1,6 +1,12 @@
 {
 	email {{ admin_email }}
 
+	acme_ca https://acme.zerossl.com/v2/DV90
+	acme_eab {
+		key_id {{ caddy_acme_eab_key_id }}
+		mac_key {{ caddy_acme_eab_mac_key }}
+	}
+
 	metrics
 
 	servers {