Merge pull request #106 from anadahz/feature/le-staging

Add doc and tasks to generate letsencrypt staging certificates

Author: n0emis

README.md

@@ -19,6 +19,7 @@ Also check [Before you install](https://docs.bigbluebutton.org/2.2/install.html#
 | `bbb_apt_mirror` | apt repo server for BigBlueButton packages | `https://ubuntu.bigbluebutton.org` | other value would be e.g. `https://packages-eu.bigbluebutton.org` |
 | `bbb_letsencrypt_enable` | Enable letsencrypt/HTTPS | `yes` |
 | `bbb_letsencrypt_email` | E-mail for use with letsencrypt | | _(required when letsencrypt is enabled)_ |
+| `bbb_letsencrypt_api` | Set letsencrypt api | `https://acme-v02.api.letsencrypt.org/directory` | Use this variable to change letsencrypt API URL (example: staging API `https://acme-staging-v02.api.letsencrypt.org/directory`) |
 | `bbb_nginx_privacy` | only log errors not access | `yes` |
 | `bbb_nginx_listen_https` | nginx: use https | `yes` | This is useful for a reverse proxy configuration where the BBB server is behind a load balancing server like haproxy that does SSL termination |
 | `bbb_nginx_root` | Default nginx www path of BigBlueButton | `/var/www/bigbluebutton-default` | Set the default nginx `www` path of BigBlueButton |

defaults/main.yml

@@ -3,6 +3,7 @@ bbb_hostname: "{{ ansible_fqdn }}"
 bbb_state: "present"
 bbb_upgrade_packages: "{% if bbb_state == 'latest'%}yes{% else %}no{%endif%}"
 bbb_letsencrypt_enable: true
+bbb_letsencrypt_api: https://acme-v02.api.letsencrypt.org/directory
 bbb_nginx_privacy: true
 bbb_nginx_listen_https: true
 bbb_nginx_root: /var/www/bigbluebutton-default

tasks/letsencrypt.yml

@@ -13,11 +13,11 @@
     update_cache: true
     state: "{{ bbb_state }}"
 
-- name: Change Let's Encrypt API to v2
+- name: Set Let's Encrypt API
   become: true
   lineinfile:
     path: /etc/letsencrypt/cli.ini
-    line: 'server = https://acme-v02.api.letsencrypt.org/directory'
+    line: "server = {{ bbb_letsencrypt_api }}"
 
 - name: Register certbot certificate file
   stat: