Skip to content

Latest commit

 

History

History
57 lines (51 loc) · 1.5 KB

domain-offensive.md

File metadata and controls

57 lines (51 loc) · 1.5 KB

Variables for Domain Offensive dns-challenge

Variable Required Default Description
acme_dns_password yes Let's Encrypt API-Token, you can get here: do.de

Usage

wildcard certificate

- name: create the certificate for *.example.com
  hosts: localhost
  collections:
    - telekom_mms.acme
  roles:
    - acme
  vars:
    acme_domain:
      certificate_name: "wildcard.example.com"
      zone: "example.com"
      email_address: "ssl-admin@example.com"
      subject_alt_name:
        - "*.example.com"
    acme_challenge_provider: domain-offensive
    acme_use_live_directory: false
    acme_account_email: "ssl-admin@example.com"
    acme_dns_password: !vault |
              $ANSIBLE_VAULT;1.1;AES256
              ...

SAN certificate

- name: create the certificate for example.com
  hosts: localhost
  collections:
    - telekom_mms.acme
  roles:
    - acme
  vars:
    acme_domain:
      certificate_name: "wildcard.example.com"
      zone: "example.com"
      email_address: "ssl-admin@example.com"
      subject_alt_name:
        - "example.com"
        - "domain1.example.com"
        - "domain2.example.com"
    acme_challenge_provider: domain-offensive
    acme_use_live_directory: false
    acme_account_email: "ssl-admin@example.com"
    acme_dns_password: !vault |
              $ANSIBLE_VAULT;1.1;AES256
              ...