From cece6892ab719c3f6c7fb12bd604f057ed81c687 Mon Sep 17 00:00:00 2001
From: staffadmin <stephane.gratiasquiquandon@gmail.com>
Date: Sun, 24 Sep 2023 04:54:00 +0200
Subject: [PATCH] add renwe https tasks

---
 dockerapps.yml | 55 ++++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 55 insertions(+)

diff --git a/dockerapps.yml b/dockerapps.yml
index 9d90546..8686cea 100644
--- a/dockerapps.yml
+++ b/dockerapps.yml
@@ -72,6 +72,61 @@
           - docker-compose
           - bootstrap_dockerapp_configure_docker_compose
 
+      - name: uncomment acme.caserver line
+        ansible.builtin.lineinfile:
+          path: /etc/sudoers
+          state: absent
+          regexp: '^%wheel'
+        tags:
+          - renew-httos
 
+      - name: remove appdata/traefik2/acme/letsencrypt/acme.json file
+        file:
+          path: "{{ dockerapp_tree_base_dir | last }}/{{ dockerapp_service }}/appdata/traefik2/acme/letsencrypt/acme.json"
+          state: absent
+        tags:
+          - renew-https
 
+      - name: Run `docker-compose down`
+        community.docker.docker_compose:
+          project_src: "{{ dockerapp_tree_base_dir | last }}/{{ dockerapp_service }}/docker-compose.yml"
+          state: absent
+        tags:
+          - renew-https
 
+      - name: Run `docker-compose up`
+        community.docker.docker_compose:
+          project_src: "{{ dockerapp_tree_base_dir | last }}/{{ dockerapp_service }}/docker-compose.yml"
+          build: false
+        tags:
+          - renew-https
+
+      - name: Wait 5 minutes for news cert/key on acme.json (stagging)
+        pause:
+          seconds: 300
+        tags:
+          - renew-https
+
+      - name: comment acme.caserver line
+        ansible.builtin.lineinfile:
+          path: /etc/sudoers
+          state: absent
+          regexp: '^%wheel'
+        tags:
+          - renew-https
+
+      - name: remove appdata/traefik2/acme/letsencrypt/acme.json file
+        file:
+          path: "{{ dockerapp_tree_base_dir | last }}/{{ dockerapp_service }}/appdata/traefik2/acme/letsencrypt/acme.json"
+          state: absent
+        tags:
+          - renew-https
+
+      - name: Run `docker-compose restart traefik`
+        community.docker.docker_compose:
+          project_src: "{{ dockerapp_tree_base_dir | last }}/{{ dockerapp_service }}/docker-compose.yml"
+          restarted: true
+          services:
+            - traefik
+        tags:
+          - renew-https
\ No newline at end of file