opendev/system-config
Code Issues Proposed changes
master
system-config/playbooks/roles/letsencrypt-acme-sh-install
History
Clark Boylan 2066403ed1 Only update acme.sh if necessary 
We install acme.sh into /opt on our servers. Some of our servers rely on
/opt for data intensive activities and we can run out of disk space on
/opt/. When our daily Ansible runs fire and hit servers in this
situation we end up with corrupted acme.sh repos on those servers. Then
acme.sh roles fail.

Avoid this problem by only updating the git repo for acme.sh if it isn't
already up to date on the versions we expect. We can still fill the disk
but this won't affect acme.sh only server operations that rely on /opt
disk space.

This is an alternative to https://review.opendev.org/c/opendev/system-config/+/934247
which will try to force updates to occur regardless of git repo
corruption.

Change-Id: Ib0ad55de833a2c2d9e8cacec0493b8422e486789
2024-11-06 09:32:21 -08:00
..
files letsencrypt: make acme.sh exits clearer 2022-08-05 08:18:55 +10:00
tasks Only update acme.sh if necessary 2024-11-06 09:32:21 -08:00
README.rst Retry acme.sh cloning 2021-10-13 18:31:46 +00:00

README.rst

Install acme.sh client

This makes the acme.sh client available on the host.

Additionally a driver.sh script is installed to run the authentication procedure and parse output.

Role Variables