HTTPS Let's Encrypt Demo

This demonstrates generating valid TLS certificates using Let's Encrypt and Certbot on a public web server.

Quick Start Guide

1 - Install dependencies

1. Install Ansible.
2. Install role dependencies: ansible-galaxy install -r requirements.yml

2 - Create a publicly-accessible VM/VPS

1. Create a publicly-accessible VM running Ubuntu 18.04 (on your favorite cloud provider, like AWS, DigitalOcean, etc.).
2. Point a valid domain name at this server's IP address (e.g. using Route53 or your DNS provider).
3. Make sure your SSH key is added to the root user account.
4. Make sure you can SSH into the server using ssh [email protected] (where domain.example.com is the domain name you have pointed at the server's IP address).

3 - Configure the inventory

Copy the inventory.example to inventory, and change:

1. The server name under the [letsencrypt] group to the domain name pointed at your new server.
2. The value for letsencrypt_email to an email address you control.

4 - Run the playbook

Run the Ansible playbook to automatically generate a Let's Encrypt certificate and use it in an example Nginx configuration:

ansible-playbook -i inventory main.yml

About the Author

This project was created by Jeff Geerling as an example for Ansible for DevOps.