kris/homelab
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Fix SELinux context for Cloudflare API files

Browse Source
This commit is contained in:
Kris Lamoureux
2026-01-25 15:27:12 -05:00
parent 213e7ed175
commit cb828bdf53
1 changed files with 5 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
roles/proxy/tasks/main.yml
View File

@@ -65,14 +65,14 @@
- name: Grab Cloudflare API token for configuration - name: Grab Cloudflare API token for configuration
ansible.builtin.slurp: ansible.builtin.slurp:
src: /root/.cloudflare-api src: /etc/letsencrypt/cloudflare-api.key
register: cfapi register: cfapi
when: proxy.production is defined and proxy.production and proxy.dns_cloudflare is defined when: proxy.production is defined and proxy.production and proxy.dns_cloudflare is defined
- name: Install Cloudflare API token - name: Install Cloudflare API token
ansible.builtin.template: ansible.builtin.template:
src: cloudflare.ini.j2 src: cloudflare.ini.j2
dest: /root/.cloudflare.ini dest: /etc/letsencrypt/cloudflare.ini
mode: "400" mode: "400"
diff: false diff: false
when: proxy.production is defined and proxy.production and proxy.dns_cloudflare is defined when: proxy.production is defined and proxy.production and proxy.dns_cloudflare is defined
@@ -97,10 +97,11 @@
--agree-tos \ --agree-tos \
--email "{{ proxy.dns_cloudflare.email }}" \ --email "{{ proxy.dns_cloudflare.email }}" \
--dns-cloudflare \ --dns-cloudflare \
--dns-cloudflare-credentials /root/.cloudflare.ini \ --dns-cloudflare-credentials /etc/letsencrypt/cloudflare.ini \
-d "*.{{ item }}" \ -d "*.{{ item }}" \
-d "{{ item }}" \ -d "{{ item }}" \
{{ proxy.dns_cloudflare.opts | default("") }}' {{ proxy.dns_cloudflare.opts | default("") }}
< /dev/null'
args: args:
creates: "/etc/letsencrypt/live/{{ item }}/fullchain.pem" creates: "/etc/letsencrypt/live/{{ item }}/fullchain.pem"
loop: "{{ proxy.dns_cloudflare.wildcard_domains }}" loop: "{{ proxy.dns_cloudflare.wildcard_domains }}"