diff --git a/renew-certs.yml b/renew-certs.yml new file mode 100644 index 0000000..98264ce --- /dev/null +++ b/renew-certs.yml @@ -0,0 +1,30 @@ +- name: Update proxy IP + hosts: proxy + vars: + proxy_conf_path: "/etc/nginx/nginx.conf" + old_ip6: "sbhbad" + new_ip6: "sbhgood" + domains: + - caddy-sucks.nextia.cloud + - dashy.nextia.cloud + - jelly.nextia.cloud + - neko.nextia.cloud + - psono.nextia.cloud + - test.nextia.cloud + - calibre.nextia.cloud + - funk.nextia.cloud + - nextia.cloud + - wbg.nextia.cloud + - cloud.nextia.cloud + - git.nextia.cloud + - manga.nextia.cloud + - oc.nextia.cloud + + tasks: + - name: Stop haproxy + ansible.builtin.shell: systemctl stop aproxy + + - name: Process each domain certificate + ansible.builtin.shell: cat /etc/letsencrypt/live/"{{ item }}"/fullchain.pem /etc/letsencrypt/live/$DOMAIN/privkey.pem > /etc/haproxy/certs/"{{ item }}".pem + loop: "{{ domains }}" +