Exposed variable certbot_auto_renew_command adding finer control over…

… the renewal command which gets executed via CRON.
ontic · Apr 20, 2020 · 495bc68 · 495bc68
1 parent 26a1e8e
commit 495bc68
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 1 deletion.
diff --git a/defaults/main.yml b/defaults/main.yml
@@ -10,6 +10,7 @@ certbot_source_repo: 'https://github.com/certbot/certbot.git'
 certbot_source_version: 'master'
 certbot_web_server_service_name: 'nginx'
 certbot_auto_renew: yes
+certbot_auto_renew_command: 'renew --quiet --no-self-upgrade --deploy-hook "{{ certbot_auto_renew_hook }}"'
 certbot_auto_renew_hook: 'service {{ certbot_web_server_service_name }} reload'
 certbot_auto_renew_user: '{{ ansible_user }}'
 certbot_auto_renew_hour: '2'

diff --git a/tasks/configure.yml b/tasks/configure.yml
@@ -111,7 +111,7 @@
   become: yes
   cron:
     name: 'Certbot automatic renewal'
-    job: '{{ certbot_script }} renew --quiet --no-self-upgrade'
+    job: '{{ certbot_script }} {{ certbot_auto_renew_command }}'
     minute: '{{ certbot_auto_renew_minute }}'
     hour: '{{ certbot_auto_renew_hour }}'
     user: '{{ certbot_auto_renew_user }}'