Add: support optional Let's Encrypt TLS certs for static web sites

1 files changed, 27 insertions, 0 deletions

diff --git a/roles/apache_server/templates/deploy_static_site_certs b/roles/apache_server/templates/deploy_static_site_certs
new file mode 100644
index 0000000..32ace4e
--- /dev/null
+++ b/roles/apache_server/templates/deploy_static_site_certs
@@ -0,0 +1,27 @@
+#!/bin/sh
+
+set -eu
+
+
+domains()
+{
+    cd /etc/letsencrypt/static_sites
+    ls
+}
+
+
+opts()
+{
+    for domain in $(domains)
+    do
+        echo -w "/srv/http/$domain" -d "$domain"
+    done
+}
+
+
+certbot certonly \
+        --noninteractive \
+        --email "{{ letsencrypt_email }}" \
+        --agree-tos \
+        --expand \
+        --webroot $(opts)