3 ms·
I just have an ansible role which runs against a server and SSL gets set up 100% for free. It's wonderful. One time time investment to write the ansible role, a
by tokenizerrr 9y ago
I just have an ansible role which runs against a server and SSL gets set up 100% for free. It's wonderful. One time time investment to write the ansible role, and now it takes like 5 seconds to enable for any server I'd like.
- toomuchtodo 9y agoSo that's the provisioning process at server setup/instantiation; how do you handle the 90 day renewal?
- riffic 9y agoI assume the GP's ansible role writes a crontab entry to perform the renewal.
- tokenizerrr 9y agoThe ansible role installs my ACME client of choice (https://github.com/lukas2511/dehydrated https://github.com/lukas2511/dehydrated), invokes it once, and adds a cronjob.
- toomuchtodo 9y agoThanks!
- gtf21 9y agoWe do the same and I found it a breeze, I even have some hooks which talk to the cloudflare API to setup the txt records for verification.