Add watchtower and secrets

This commit is contained in:
2024-10-19 12:33:16 +01:00
parent 0ce8f1e8fb
commit f8e1ec8b72
4 changed files with 12 additions and 181 deletions

View File

@@ -3,24 +3,5 @@
ansible-galaxy install -r requirements.yml
# Install the playbook
ansible-playbook -i inventory frontend.yaml
# Check the cron jobs
crontab -u matt -l
```
TODO: Update the pre/post scripts at /etc/letsencrypt/renewal-hooks to stop/start docker reverse_proxy
TODO: Update cron to run certbot as root
If the above is done, I'm not sure the blow is needed...
TODO: Ensure /var/log/letsencrypt, /var/lib/letsencryprt and maybe /etc/letsencrypt are writable as the ansible user.
Something like
```bash
chgrp adm /var/log/letsencrypt
chmod g+rwx /var/log/letsencrypt
chgrp -R adm /etc/letsencrypt/
chmod -R g+rwx /etc/letsencrypt/
chgrp adm /var/lib/letsencrypt
chmod g+rwx /var/lib/letsencrypt
ansible-playbook -i inventory -e @secrets.enc --ask-vault-pass frontend.yaml
```