diff --git a/README.md b/README.md index 5c04cf70e86f837f076afe49ee8dbe6d8fb67484..5bce80ba99dc558c37f3123df5733b59a3b519ed 100644 --- a/README.md +++ b/README.md @@ -16,6 +16,7 @@ The variable `certbot_install_from_source` controls whether to install Certbot f certbot_auto_renew_user: "{{ ansible_user }}" certbot_auto_renew_hour: 3 certbot_auto_renew_minute: 30 + certbot_auto_renew_options: "--quiet --no-self-upgrade" By default, this role configures a cron job to run under the provided user account at the given hour and minute, every day. The defaults run `certbot renew` (or `certbot-auto renew`) via cron every day at 03:30:00 by the user you use in your Ansible playbook. It's preferred that you set a custom user/hour/minute so the renewal is during a low-traffic period and done by a non-root user account. diff --git a/defaults/main.yml b/defaults/main.yml index 7f6f0d3c395b90592b4d2510aeb5b98956593ad4..395b47d023febd4d6e6bfe2f58b490939d57146d 100644 --- a/defaults/main.yml +++ b/defaults/main.yml @@ -4,6 +4,7 @@ certbot_auto_renew: true certbot_auto_renew_user: "{{ ansible_user }}" certbot_auto_renew_hour: 3 certbot_auto_renew_minute: 30 +certbot_auto_renew_options: "--quiet --no-self-upgrade" # To install from source (on older OSes or if you need a specific or newer # version of Certbot), set this variable to `yes` and configure other options. diff --git a/tasks/renew-cron.yml b/tasks/renew-cron.yml index 7678a7ca4ac8a5c8af60f3da6da5bd96483f538f..394a30e7216fdb33ec2f8879bf743cdc31055b0e 100644 --- a/tasks/renew-cron.yml +++ b/tasks/renew-cron.yml @@ -2,7 +2,7 @@ - name: Add cron job for certbot renewal (if configured). cron: name: Certbot automatic renewal. - job: "{{ certbot_script }} renew --quiet --no-self-upgrade" + job: "{{ certbot_script }} renew {{ certbot_auto_renew_options }}" minute: "{{ certbot_auto_renew_minute }}" hour: "{{ certbot_auto_renew_hour }}" user: "{{ certbot_auto_renew_user }}"