Certbot Cloudflare

Use Cloudflare DNS for wildcard Certbot generation

Requirements

• Cloudflare DNS setup
• Cloudflare API Key
• Wildcard domain setup (for wildcard certs) [*.domain.com or *.subdomain.domain.com]

Role Variables

certbot_cloudflare_email: "[email protected]"

Your Cloudflare email address

certbot_cloudflare_api_key: ''

Your Cloudflare Global API Key, optionally encrypted ansible-vault encrypt_string 'CLOUDFLARE_API_KEY' --name 'certbot_cloudflare_api_key'

certbot_certs:
  - email: "{{ certbot_cloudflare_email }}"
  - domains:
      - "*.example3.com"

The wildcard domain to create the cert for. For non-wildcard domains, I recommend using geerlingguy.certbot:

certbot_cloudflare_acme_server: "{{ certbot_cloudflare_acme_test }}"

or:

certbot_cloudflare_acme_server: "{{ certbot_cloudflare_acme_live }}"

Let's Encrypt server to use, defaults to test.

Dependencies

• geerlingguy.pip
• geerlingguy.certbot

Example Playbook

Including an example of how to use your role (for instance, with variables passed in as parameters) is always nice for users too:

- hosts: servers

  vars:
    certbot_cloudflare_email: "[email protected]"
    certbot_cloudflare_api_key: 'CLOUDFLARE_API_KEY'
    certbot_certs:
      - email: "{{ certbot_cloudflare_email }}"
      - domains:
          - "*.example3.com"

  roles:
     - nikolay.certbot_cloudflare

License

MIT / BSD

Author Information

This role was created in 2018 by Michael Porter, and continued in 2022 by Nikolay Kolev.