1 files changed, 19 insertions, 0 deletions
diff --git a/roles/lets_encrypt/tasks/main.yml b/roles/lets_encrypt/tasks/main.yml
new file mode 100644
index 0000000..755f58d
--- /dev/null
+++ b/roles/lets_encrypt/tasks/main.yml
@@ -0,0 +1,19 @@
+- name: Install lets-encrypt
+  become: yes
+  pacman: name=letsencrypt state=present update_cache=yes
+
+- name: stop webserver
+  become: yes
+  service: name=nginx state=stopped
+  ignore_errors: yes
+
+- name: validate domains
+  become: yes
+  command: letsencrypt certonly --standalone --email dennis@brentj.es --agree-tos {% for domain in lets_encrypt_domains %}-d {{ domain }} {% endfor %}
+  tags:
+    - production_only
+
+- name: start webserver
+  become: yes
+  service: name=nginx state=started
+  ignore_errors: yes