diff --git a/defaults/main.yaml b/defaults/main.yaml index dbc697d..fc1b2d1 100644 --- a/defaults/main.yaml +++ b/defaults/main.yaml @@ -1,6 +1,7 @@ --- certbot_certs: [] certbot_certs_email: root@{{ ansible_inventory }} +certbot_request_fqdn_cert: true certbot_plugin_arguments: digitalocean: --dns-digitalocean --dns-digitalocean-credentials /root/do_secrets.ini diff --git a/tasks/request_certs.yaml b/tasks/request_certs.yaml index 26fb290..4accab2 100644 --- a/tasks/request_certs.yaml +++ b/tasks/request_certs.yaml @@ -2,7 +2,9 @@ - name: Certbot - Add host FQDN if not already listed in certs ansible.builtin.set_fact: certbot_certs: "{{ certbot_certs + [{'hostname': ansible_fqdn}] }}" - when: certbot_certs | selectattr('hostname', 'equalto', ansible_fqdn) | list | length == 0 + when: + - certbot_request_fqdn_cert + - certbot_certs | selectattr('hostname', 'equalto', ansible_fqdn) | list | length == 0 - name: Certbot - Request Certificate ansible.builtin.include_tasks: cert.yaml