investigate automated certbot for * certs

planetary-social / ansible-scripts

Ansible automation scripts used at Planetary

MIT License

2 stars 3 forks source link

investigate automated certbot for * certs #16

Closed rabble closed 1 year ago

rabble commented 1 year ago

Add extension to certbot ansible so it works with gandi.net

mplorentz commented 1 year ago

Some hidden work blocking this:

secret management for gandi API
security hardening
setting up python environment and community plugins for cerbot DNS renewal

mplorentz commented 1 year ago

Blocked until we pick a new registrar (see #40)

cooldracula commented 1 year ago

Opened ansible-scripts/PR#27 to use cloudflare and certbot for automated certificate creation and renewal.

mplorentz commented 1 year ago

I think this can be closed. We have chosen cloudflare and @cooldracula has proved it out. I think there is more work to do to convert some of our existing deployments to use this setup, but that can be ticketed separately.