First-classen support for webroot

defaults/main.yml

@@ -1,20 +1,23 @@
 ---
 # defaults file for ansible-acmetool
 
-# TODO: webserver (apache or nginx)
+# web server (apache, nginx, none)
 acmetool_websrv: "nginx"
 
 # acmetool response file
+
+acmetool_responses_method: "webroot"  # this is overridden if acmetool_websrv is set
 acmetool_responses_email: "[email protected]"
 acmetool_responses_install_cronjob: "true"
 acmetool_responses_install_haproxy_script: "false"
 acmetool_responses_install_redirector_systemd: "false"
 acmetool_responses_agreement: "https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf"
+acmetool_responses_webroot_path: "/var/www/foo/bar/.well-known/acme-challenge"  # only when acmetool_responses_method == "webroot"
 
 # acmetool cert hostname
 # for multiple sites with one cert, separate site names with a space
 # acmetool_want: "example.com www.example.com"
 # (not providing a default; shall be defined in the playbook or host_vars)
 
 # nginx temp sites file for pulling initial certificates
-acmetool_nginx_sites_filename: "00-acmetool.conf"
+acmetool_nginx_sites_filename: "00-acmetool.conf"

templates/response-file.yml.j2

@@ -12,7 +12,7 @@
 "acmetool-quickstart-choose-server": https://acme-v01.api.letsencrypt.org/directory
 "acmetool-quickstart-choose-method": {{ acmetool_responses_method }}
 # This is only used if "acmetool-quickstart-choose-method" is "webroot".
-"acmetool-quickstart-webroot-path": "/var/www/foo/bar/.well-known/acme-challenge"
+"acmetool-quickstart-webroot-path": {{ acmetool_responses_webroot_path }}
 "acmetool-quickstart-complete": true
 "acmetool-quickstart-install-cronjob": {{ acmetool_responses_install_cronjob }}
 "acmetool-quickstart-install-haproxy-script": {{ acmetool_responses_install_haproxy_script }}