task 1-4

2026-09-18 20:07:04 +02:00
parent 958e22734f
commit 442ddf8816
88 changed files with 2501 additions and 0 deletions
@@ -0,0 +1,35 @@
+---
+# HTTP-only vhosts, used for the initial certbot webroot challenge and
+# permanently for redirecting to HTTPS afterwards.
+nginx_vhosts:
+  - server_name: "{{ woodpecker_domain }}"
+    filename: "{{ woodpecker_domain }}.conf"
+    root: "/var/www/letsencrypt"
+    extra_parameters: |
+      location /.well-known/acme-challenge/ {
+        root /var/www/letsencrypt;
+      }
+      location / {
+        return 301 https://$host$request_uri;
+      }
+
+  - server_name: "{{ zot_domain }}"
+    filename: "{{ zot_domain }}.conf"
+    root: "/var/www/letsencrypt"
+    extra_parameters: |
+      location /.well-known/acme-challenge/ {
+        root /var/www/letsencrypt;
+      }
+      location / {
+        return 301 https://$host$request_uri;
+      }
+
+certbot_create_if_missing: true
+certbot_create_method: webroot
+certbot_webroot: /var/www/letsencrypt
+certbot_admin_email: "{{ letsencrypt_email }}"
+certbot_certs:
+  - domains:
+      - "{{ woodpecker_domain }}"
+  - domains:
+      - "{{ zot_domain }}"