geerlingguy/ansible-role-certbot

Add support for ACME servers other than Let's Encrypt

maxhoesel opened this issue · 2 comments

I am interested in running this role against a self-hosted ACME server instead of the official Let's Encrypt one.

Over the last few years, several projects have sprung up that deal with hosting an ACME server for a private/internal network. I'm currently working on setting up one in a testing environment using this project. Having the option to use this role with such a self-hosted ACME server would be very nice for automatically generating and renewing internal certificates for encrypting application traffic.

I'd be happy to implement this feature myself, assuming that it is desired. Looking at the documentation available, it seems like adding this feature would require adding an environmental var (REQUESTS_CA_BUNDLE) to all certbot_script calls, as well as a --server parameter to the initial create command. Obviously, this feature should be disabled by default and toggle-able via a role default.

stale commented

This issue has been marked 'stale' due to lack of recent activity. If there is no further activity, the issue will be closed in another 30 days. Thank you for your contribution!

Please read this blog post to see the reasons why I mark issues as stale.

stale commented

This issue has been closed due to inactivity. If you feel this is in error, please reopen the issue or file a new issue with the relevant details.