INF-113 acme.sh LetsEncrypt certificate role
initial commit
Change-Id: I36f733306b439a0cd92bded0726dd53a0a4b4084
diff --git a/handlers/main.yml b/handlers/main.yml
new file mode 100644
index 0000000..6f7ef9f
--- /dev/null
+++ b/handlers/main.yml
@@ -0,0 +1,19 @@
+---
+# acme handlers/main.yml
+#
+# SPDX-FileCopyrightText: © 2020 Open Networking Foundation <support@opennetworking.org>
+# SPDX-License-Identifier: Apache-2.0
+
+- name: install-certs
+ become: true
+ become_user: "{{ acmesh_username }}"
+ command:
+ chdir: "{{ acmesh_base_dir }}/home/.acme.sh"
+ cmd: >
+ ./acme.sh
+ --install-cert
+ -d {{ item.cert_names | join (" -d ") }}
+ --key-file {{ certificate_dir }}/{{ item.cert_names | first }}/privkey.pem
+ --fullchain-file {{ certificate_dir }}/{{ item.cert_names | first }}/fullchain.pem
+ --reloadcmd "sudo /bin/systemctl restart {{ webserver_service }}"
+ with_items: "{{ acme_certs }}"