ansible-playbooks

commit 651593c6c6741f48b93769f190deb7610c4426c8
parent a1c5095f6036b93c76967793e0812660b2cba394
Author: Paco Esteban <paco@e1e0.net>
Date:   Fri, 10 Jan 2020 12:35:50 +0100

better renew script for acme client

Diffstat:
M
roles/httpd/defaults/main.yml
 | 
3
+++
M
roles/httpd/templates/renew_cert.sh.j2
 | 
10
+++++++---

2 files changed, 10 insertions(+), 3 deletions(-)
diff --git a/roles/httpd/defaults/main.yml b/roles/httpd/defaults/main.yml
@@ -33,3 +33,6 @@ https_servers: []
 #       - name: "/*"
 #         options:
 #         - "block return 301 \"https://$HTTP_HOST$REQUEST_URI\""
+
+https_restart_services:
+  - httpd
diff --git a/roles/httpd/templates/renew_cert.sh.j2 b/roles/httpd/templates/renew_cert.sh.j2
@@ -1,10 +1,14 @@
 #!/bin/sh
 
+restart=0
+
 {% for server in https_servers %}
-/usr/sbin/acme-client -v {{ server.server_name }}
+/usr/sbin/acme-client -v {{ server.server_name }} && restart=1
 {% endfor %}
 
-if [ $? -eq 0 ]
+if [ "$restart" -eq 1 ]
 then
-        /usr/sbin/rcctl restart httpd
+{% for service in https_restart_services %}
+        /usr/sbin/rcctl restart {{ service }}
+{% endfor %}
 fi