From 327610bad876a6c9ba4a7dbbb760ecfacb857c95 Mon Sep 17 00:00:00 2001
From: Lars Wirzenius <liw@liw.fi>
Date: Fri, 18 May 2018 16:10:00 +0300
Subject: Change: allow .well-known dir be outside webroot

---
 roles/apache_server/tasks/main.yml | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

(limited to 'roles/apache_server/tasks/main.yml')

diff --git a/roles/apache_server/tasks/main.yml b/roles/apache_server/tasks/main.yml
index b1de7e2..808d8e9 100644
--- a/roles/apache_server/tasks/main.yml
+++ b/roles/apache_server/tasks/main.yml
@@ -24,11 +24,13 @@
 
 - name: "create list of domains for static sites to get Let's Encrypt certs for"
   shell: |
+    listdir="/etc/letsencrypt/static_sites"
+    wellknown="/srv/letsencrypt"
+    mkdir -p "$listdir" "$wellknown"
     if [ "{{ item.letsencrypt|default(false) }}" = True ]
     then
-        listdir="/etc/letsencrypt/static_sites"
-        mkdir -p "$listdir"
         touch "$listdir/{{ item.domain }}"
+        mkdir -p "$wellknown/{{ item.domain }}"
     fi
   with_items: "{{ static_sites }}"
   when: letsencrypt
-- 
cgit v1.2.1