Merge remote-tracking branch 'refs/remotes/origin/main'

ansible/inventory/host_vars/nuc.balsillie.house/ansible_connection.yaml

@@ -0,0 +1,4 @@
+ansible_connection: local
+ansible_user: ladmin
+ansible_become_user: root
+ansible_become_method: sudo

ansible/inventory/host_vars/nuc.balsillie.house/certbot.yaml

@@ -0,0 +1,11 @@
+certbot_rfc2136_server: '10.208.240.1'
+certbot_rfc2136_key_name: 'rndc-house'
+certbot_rfc2136_key_algorithm: 'hmac-sha256'
+
+certbot_webserver_type: 'nginx' # 'nginx' or 'apache'
+certbot_dns_plugin: 'rfc2136'
+certbot_email: "certbot.kodi00@balsillie.email"
+certbot_acme_server: "acme-v02.api.letsencrypt.org"
+
+certbot_domains:
+  - xmr.balsillie.house

ansible/inventory/inventory.yaml

@@ -23,6 +23,7 @@ all:
         kube00.balsillie.house:
         lat5420.balsillie.house:
         lat7490.balsillie.house:
+        nuc.balsillie.house:
     servers:
       children:
         hypervisors:
@@ -53,6 +54,7 @@ all:
             lat5420.balsillie.house:
             sff.balsillie.house:
             kodi00.balsillie.house:
+            nuc.balsillie.house:
         windows:
           hosts:
             lat7490.balsillie.house:
@@ -66,6 +68,7 @@ all:
             sff.balsillie.house:
             mp00.balsillie.house:
             kodi00.balsillie.house:
+            nuc.balsillie.house:
         kodi:
           hosts:
             kodi00.balsillie.house:

ansible/playbooks/infra/hv00.yaml

@@ -6,5 +6,5 @@
   gather_facts: true
   become: true
   roles:
-    - role: aur_repo_host
+    # - role: aur_repo_host
     - role: nginx

ansible/playbooks/infra/nuc.yaml

@@ -0,0 +1,9 @@
+---
+
+- name: Setup NUC
+  hosts:
+    - nuc.balsillie.house
+  gather_facts: true
+  become: true
+  roles:
+    - role: certbot

ansible/roles/certbot/tasks/main.yaml

@@ -49,7 +49,7 @@
       - "{{ item }}"
     creates: /etc/letsencrypt/live/{{ item }}/fullchain.pem
   loop: "{{ certbot_domains }}"
-  notify: "{{ certbot_notify }}"
+  notify: "{{ certbot_notify | default(omit) }}"
 
 - name: Enable certbot renewal
   ansible.builtin.service: