1*912701f9SAndroid Build Coastguard Worker- hosts: letsencrypt 2*912701f9SAndroid Build Coastguard Worker become: yes 3*912701f9SAndroid Build Coastguard Worker vars_files: 4*912701f9SAndroid Build Coastguard Worker - vars/main.yml 5*912701f9SAndroid Build Coastguard Worker - local-vars/local.yml 6*912701f9SAndroid Build Coastguard Worker tasks: 7*912701f9SAndroid Build Coastguard Worker - name: Install certbot packages 8*912701f9SAndroid Build Coastguard Worker apt: 9*912701f9SAndroid Build Coastguard Worker pkg: 10*912701f9SAndroid Build Coastguard Worker - python3-certbot-nginx 11*912701f9SAndroid Build Coastguard Worker - name: setup certbot 12*912701f9SAndroid Build Coastguard Worker command: > 13*912701f9SAndroid Build Coastguard Worker sudo certbot --nginx --agree-tos -m {{ surveytooldeploy.certbot_admin_email }} 14*912701f9SAndroid Build Coastguard Worker -d {{ inventory_hostname }} --non-interactive 15*912701f9SAndroid Build Coastguard Worker --keep --redirect --uir --hsts --staple-ocsp --must-staple 16*912701f9SAndroid Build Coastguard Worker args: 17*912701f9SAndroid Build Coastguard Worker creates: /etc/letsencrypt/renewal/{{ inventory_hostname }}.conf 18