ansible_ssl_expiry_check

This Ansible playbook creates a new user on the remote server and setups the scripts and cron jobs that check for a expiring SSL certificate. If a certificate expiration period is less than 30 days notifications will be sent to a Slack channel.

Configure the Ansible playbook

You must define slack_webhook and domains as both variables are required.

Optionally configurable variables

• ssl_port - standard is 443,
• ssl_expiry_days_check - the script starts warning if certificate is expiring in less than this period,
• cron_period_check - how often the cron job should be run.

Example ansible_ssl_check.yml playbook .

---
- hosts: server_name
  roles:
    - user_group_directories
    - rvm
    - whenever
  vars:
    slack_webhook: "https://hooks.slack.com/services/xxxxxxx/xxxxxxx/xxxxxxxx"
    domains:
      - github.com
      - gitlab.com

If you want to test things out then change ssl_expiry_days_check to something high like 300.

Run the playbook

• Add the server to Ansible's inventory file and then run the command below.

ansible-playbook -i hosts ansible_ssl_check.yml

This command assumes the hosts inventory file is in the current directory.

How to use roles from this repository in another repository?

As a git submodule

Add this repo as a submodule to your own repository.

git submodule add [email protected]:neidiom/ansible_ssl_expiry_check.git

and then update paths to roles.

---
- hosts: server_name
  roles:
    - ansible_ssl_expiry_check/roles/user_group_directories
    - ansible_ssl_expiry_check/roles/rvm
    - ansible_ssl_expiry_check/roles/whenever
  vars:
    slack_webhook: "https://hooks.slack.com/services/xxxxxxx/xxxxxxx/xxxxxxxx"
    domains:
      - github.com
      - gitlab.com

Install using ansible-galaxy

via CLI

ansible-galaxy install --force -n -p .  git+https://github.com/neidiom/ansible_ssl_expiry_check.git

via requirements.yml file

Create a requirements.yml

---
- name: ansible_ssl_expiry_check
  scm: git
  src: git+https://github.com/neidiom/ansible_ssl_expiry_check.git
  version: master

Run to fetch the roles.

ansible-galaxy install --force -r requirements.yml -p

Update paths to roles.

---
- hosts: server_name
  roles:
    - ansible_ssl_expiry_check/user_group_directories
    - ansible_ssl_expiry_check/rvm
    - ansible_ssl_expiry_check/whenever
  vars:
    slack_webhook: "https://hooks.slack.com/services/xxxxxxx/xxxxxxx/xxxxxxxx"
    domains:
      - github.com
      - gitlab.com