ansible plays for docker, haproxy & varnish

ansible/roles/certbot/defaults/main.yml

@@ -0,0 +1,3 @@
+certbot_packages:
+  - certbot
+  - python3-certbot-dns-cloudflare

ansible/roles/certbot/handlers/main.yml

@@ -0,0 +1,4 @@
+---
+- name: noop
+  debug:
+    msg: "Certbot role completed"

ansible/roles/certbot/tasks/install.yml

@@ -0,0 +1,8 @@
+---
+- apt:
+    update_cache: true
+  when: ansible_facts.os_family == "Debian"
+
+- package:
+    name: "{{ certbot_packages }}"
+    state: present

ansible/roles/certbot/tasks/main.yml

@@ -0,0 +1,3 @@
+---
+- import_tasks: install.yml
+- import_tasks: secrets.yml

ansible/roles/certbot/tasks/secrets.yml

@@ -0,0 +1,14 @@
+---
+- file:
+    path: "{{ certbot_cloudflare_secrets_dir }}"
+    state: directory
+    owner: root
+    group: root
+    mode: "0700"
+
+- template:
+    src: cloudflare.ini.j2
+    dest: "{{ certbot_cloudflare_ini_path }}"
+    owner: root
+    group: root
+    mode: "0600"

ansible/roles/certbot/templates/cloudflare.ini.j2

@@ -0,0 +1 @@
+dns_cloudflare_api_token = {{ certbot_cloudflare_api_token }}