ansible-role-mongodb/tasks/mongodb-letsencrypt-acmetoo...

39 lines
1.1 KiB
YAML

---
- block:
- name: Create the acme hooks directory if it does not yet exist
file:
dest: '{{ letsencrypt_acme_services_scripts_dir }}'
state: directory
owner: root
group: root
- name: Install a script that fix the letsencrypt certificate for mongodb and then reload the service
template:
src: mongodb-letsencrypt-acmetool.sh.j2
dest: '{{ letsencrypt_acme_services_scripts_dir }}/mongodb'
owner: root
group: root
mode: 4555
- name: Create the mongodb certificate directory
file:
dest: '{{ mongodb_ssl_cert_dir }}'
state: directory
owner: root
group: mongodb
mode: 0750
- name: Verify if the mongodb pem file exists
stat:
path: '{{ mongodb_ssl_certkey_file }}'
register: mongodb_pem
- name: Copy the certificate and its key where the mongo server expects it
command: "{{ letsencrypt_acme_services_scripts_dir }}/mongodb"
when: not mongodb_pem.stat.exists
when:
- mongodb_ssl_letsencrypt_managed
- letsencrypt_acme_install
tags: [ 'mongodb', 'letsencrypt', 'mongodb_letsencrypt' ]