certbot: Initial version of role

roles/certbot/meta/main.yml

@@ -0,0 +1,3 @@
+---
+dependencies:
+  - { role: nginx/server }

roles/certbot/tasks/main.yml

@@ -0,0 +1,58 @@
+---
+- name: check support
+  fail:
+    msg: Role not supported in your system
+  when: ansible_os_family != "RedHat"
+
+- name: install certbot packages
+  package:
+    name: certbot
+    state: installed
+
+- name: create certbot group
+  group:
+    name: certbot
+    gid: 1002
+
+- name: create certbot user
+  user:
+    name: certbot
+    comment: Service Certbot
+    createhome: false
+    group: certbot
+    home: /var/empty
+    shell: /sbin/nologin
+    uid: 1002
+
+- name: add certbot nginx site
+  include_role:
+    name: nginx/site
+  vars:
+    site: certbot.home.foo.sh
+
+- name: create certbot .well-known directory
+  file:
+    path: /srv/web/certbot.home.foo.sh/.well-known
+    owner: root
+    group: "{{ ansible_wheel }}"
+    mode: 0755
+    state: directory
+
+- name: create certbot directories
+  file:
+    path: "{{ item }}"
+    owner: root
+    group: certbot
+    mode: 0775
+    state: directory
+  with_items:
+    - /srv/web/certbot.home.foo.sh/.well-known/acme-challenge
+    - /export/letsencrypt
+
+- name: link certbot datadirectory
+  file:
+    src: /export/letsencrypt
+    dest: /srv/letsencrypt
+    owner: root
+    group: "{{ ansible_wheel }}"
+    state: link