Enable automatic LE cert renewal

Author: edwinsteele

ansible/inventory

@@ -1,9 +1,11 @@
-[openbsd_70]
+[openbsd_73]
 192.168.20.254
+gateway.wordspeak.org
 45.77.238.164
 
 [firewalls]
 192.168.20.254
+gateway.wordspeak.org
 
 [wordspeak]
 45.77.238.164

ansible/roles/nginx_wordspeak.org/tasks/main.yml

@@ -82,6 +82,12 @@
     path: /etc/acme-client.conf
     line: 'include "/etc/acme-client.wordspeak-org.conf"'
 
+- name: Schedule acme-client run via cron
+  cron:
+    name: Attempt to renew and apply new LE cert
+    special_time: weekly
+    job: acme-client -v wordspeak.org && rcctl restart nginx
+
 - name: copy wordspeak.org nginx config
   template:
     src: wordspeak-org.conf.j2