Sys-svc-certbot Role¶

Description: No description available

Variables¶

author: Kevin Veen-Birkenbach
description: Automates the installation and configuration of Certbot for SSL/TLS certificate management
license: Infinito.Nexus NonCommercial License
license_url: https://s.infinito.nexus/license
company: Kevin Veen-Birkenbach

Consulting & Coaching Solutions https://www.veen.world

min_ansible_version: 2.9
platforms: [{‘name’: ‘Archlinux’, ‘versions’: [‘rolling’]}]
galaxy_tags: [‘certbot’, ‘ssl’, ‘tls’, ‘https’, ‘encryption’, ‘letsencrypt’, ‘acme’, ‘automation’]
repository: https://s.infinito.nexus/code
issue_tracker_url: https://s.infinito.nexus/issues
documentation: https://docs.infinito.nexus

README¶

Certbot¶

🔥 Description¶

This Ansible role automates the installation and configuration of Certbot, a free and open-source tool for automating the deployment of Let’s Encrypt certificates. It also handles the setup of DNS plugins for ACME challenges.

📖 Overview¶

Optimized for Archlinux, this role ensures secure SSL/TLS certificate generation with minimal manual intervention. It supports both webroot and DNS-01 validation methods, providing flexibility based on your infrastructure needs.

Key Features¶

Automatic Installation: Installs certbot and the necessary DNS plugin via pacman.
Dynamic DNS Plugin Support: Automatically installs the correct certbot-dns-<provider> package based on your selected challenge method.
Credential Management: Creates secure credential files for DNS API tokens when using DNS-01 validation.
Idempotent Execution: Tasks are intelligently executed only once per playbook run.

🎯 Purpose¶

The Certbot role provides a ready-to-use, automated solution for SSL/TLS management in your infrastructure. Whether you’re managing traditional servers or containerized environments, this role ensures your certificates are always in place and valid.

🚀 Features¶

Certbot Installation: Ensures the latest version of Certbot is installed.
DNS Plugin Installation: Installs a matching plugin based on your configured ACME challenge method.
Credential Directory Management: Creates a secured /etc/certbot directory with proper permissions.
API Token File Setup: Manages API token files securely for DNS challenge authentication.