fix: add force option to acme

ZeitOnline · Dec 20, 2024 · 68caa6f · 68caa6f
1 parent 4df5854
commit 68caa6f
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/deployment/roles/webserver/tasks/acme.yml b/deployment/roles/webserver/tasks/acme.yml
@@ -71,10 +71,11 @@
     validate: "visudo -cf %s"
 
 - name: request initial certificate (this may take a while)
-  command: "sudo -u acme /usr/local/sbin/acme.sh --server letsencrypt --issue --webroot /letsencrypt --domain {{ploy_fqdn}} --home /var/db/acme/.acme.sh"
+  command: "sudo -u acme /usr/local/sbin/acme.sh --server letsencrypt --issue --webroot /letsencrypt --domain {{ploy_fqdn}} --home /var/db/acme/.acme.sh" --force
   args:
     chdir: /var/db/acme
     creates: "/var/db/acme/certs/{{ploy_fqdn}}/fullchain.cer"
+  tags: acme_initial
 
 - name: install certificate
   command: "sudo -u acme /usr/local/sbin/acme.sh --install-cert -d {{ploy_fqdn}} --key-file /usr/local/etc/nginx/certs/briefkasten.key --fullchain-file /usr/local/etc/nginx/certs/briefkasten.crt"