Certbot

Features

• Installs & Configures certbot automatically on one or hundred of hosts.
• Works well with Apache or NGINX
• Integrates with FreeIPA
• Can be combined with our Ansible roles (lsa.webserver, lsa.freeipa,lsa.wordpress) for easier handling
• For easier handling helper scripts for each cert are generated
• Ansible facts are saved on Host, set certbot_facts to true (Python3, Pipx, Pyyml will be installed)
• Small Readme is generated on Host (default /etc/ansible/readme) set certbot_readme to true

Tasks

Basic Installation via Playbook

- name: "certbot"

  hosts: all
  become: True

  roles:
    - certbot

Inventory Defaults

We define the certs in our inventory like this:

	certbot_vhosts:
	     name: "domain.com"
	     alias:
	         - "www.domain.com"