feat: configurable ACME mail address

The email address used for SSL registrations can be configured by setting the Ansible variable "certificates_email_address".
getstackhead · Jan 9, 2021 · 81675b8 · 81675b8
1 parent bc820be
commit 81675b8
Show file tree

Hide file tree

Showing 3 changed files with 4 additions and 1 deletion.
diff --git a/ansible/__tests__/test-tf-generation.yml b/ansible/__tests__/test-tf-generation.yml
@@ -3,6 +3,7 @@
   connection: local
   gather_facts: no
   tasks:
+    - include_vars: "../roles/stackhead_project/defaults/main.yml"
     - include_vars: "../roles/stackhead_module_api/testdata/variables.yml"
     - include_vars: "../vars/internal.yml"
     - include_vars: "../roles/stackhead_module_api/vars/main.yml"

diff --git a/ansible/roles/stackhead_project/defaults/main.yml b/ansible/roles/stackhead_project/defaults/main.yml
@@ -1,3 +1,5 @@
 ---
 stackhead__config_folder: "{{ inventory_dir }}/stackhead" # value is overridden by StackHead CLI
 # the variable "stackhead__config_folder" is part of the StackHead module API (update documentation if changed)
+
+certificates_email_address: "certificates-noreply@stackhead.io"
diff --git a/ansible/templates/terraform/ssl-certificate.tf.j2 b/ansible/templates/terraform/ssl-certificate.tf.j2
@@ -4,7 +4,7 @@ resource "tls_private_key" "{{ project_name }}-private_key" {
 
 resource "acme_registration" "{{ project_name }}-reg" {
   account_key_pem = tls_private_key.{{ project_name }}-private_key.private_key_pem
-  email_address   = "certificate@saitho.me"
+  email_address   = "{{ certificates_email_address }}"
 }
 
 // Create folder for acme-challenges