From 8e5fcb706849d23b62e7463c3bc70610eb509d7b Mon Sep 17 00:00:00 2001
From: Adar Nimrod <nimrod@shore.co.il>
Date: Fri, 29 Jan 2021 19:11:13 +0200
Subject: [PATCH] Update certificate if the names change.
Create a new ACME challenge if the CSR changes (like when the list of
names change), thus creating a new certificate.
---
tasks/renew-cert.yaml | 1 +
1 file changed, 1 insertion(+)
diff --git a/tasks/renew-cert.yaml b/tasks/renew-cert.yaml
index 96ce9b3..27e3095 100644
--- a/tasks/renew-cert.yaml
+++ b/tasks/renew-cert.yaml
@@ -54,6 +54,7 @@
acme_directory: *acme_directory
acme_version: *acme_version
csr: *csr_src
+ force: '{{ acme_csr is changed }}'
fullchain_dest: &cert_src |-
{{ playbook_dir }}/{{ host }}.crt
modify_account: false
--
GitLab