certbot
Setup certbot Let’s Encrypt client.
- Default Variables
- certbot_bin
- certbot_command_arguments
- certbot_config_dir
- certbot_credentials
- certbot_cron_enabled
- certbot_cron_file
- certbot_cron_hour
- certbot_cron_minute
- certbot_domain_groups
- certbot_email
- certbot_log_dir
- certbot_max_log_backups
- certbot_packages_extra
- certbot_preferred_challenges
- certbot_rsa_key_size
- certbot_server
- certbot_user
- certbot_version
- certbot_virtualenv
- certbot_virtualenv_command
- certbot_work_dir
- Dependencies
Location of the certbot binary. Default is to ~/.local/.bin/certbot.
certbot_command_arguments:
- certonly
certbot_config_dir: /etc/letsencrypt
Specify key value parairs for your credentials (e.g. plugin credentials). The credentials will be saved to {{ certbot_config_dir }}/credentials.ini and you could add the path to certbot_command_arguments` if required.
certbot_credentials: []
Enable scheduling via cron.
certbot_cron_enabled: true
Use a file under /etc/cron.d but this will only work if certbot_user has write permissions for this location.
certbot_cron_file: _unset_
certbot-letsencrypt
certbot_cron_hour: '3'
certbot_cron_minute: '30'
certbot_domain_groups:
- name: example
domains:
- '*.example.com'
- example.com
init: false
certbot_email: mail@example.com
certbot_log_dir: /var/log/letsencrypt
certbot_max_log_backups: 30
Extra packages to install with pip (e.g. DNS plugins).
certbot_packages_extra: []
certbot_preferred_challenges: dns
certbot_rsa_key_size: 4096
certbot_server: https://acme-v02.api.letsencrypt.org/directory
certbot_user: root
Set a fix version of the certbot package to install.
certbot_version: _unset_
certbot_virtualenv: /opt/python3/certbot
certbot_virtualenv_command: /usr/bin/python3 -m venv
certbot_work_dir: /var/lib/letsencrypt
None.