mirror of
https://gitlab.archlinux.org/archlinux/infrastructure.git
synced 2026-09-11 15:50:32 +02:00
Kristian Klausen
0991324392
It provides a better UX compared to certbot and is one less moving part. The switch is done where it is possible and sensible. That is basically all the places where nginx is the sole user of the certificate. Certificates using the DNS-01 challenge (e.g. geo mirrors) or which are used with stream (e.g. rsync over TLS) still require certbot as it is currently not supported in the native integration[2][3]. [1] https://blog.nginx.org/blog/native-support-for-acme-protocol [2] https://github.com/nginx/nginx-acme/issues/11 [3] https://github.com/nginx/nginx-acme/issues/13
8 lines
283 B
YAML
8 lines
283 B
YAML
- name: Make nginx log dir
|
|
file: path=/var/log/nginx/{{ ping_domain }} state=directory owner=root group=root mode=0755
|
|
|
|
- name: Set up nginx
|
|
template: src=nginx.d.conf.j2 dest="/etc/nginx/nginx.d/ping.conf" owner=root group=root mode=644
|
|
notify: Reload nginx
|
|
tags: ['nginx']
|