no default cert causing issues with restart

[strarsis]

Submit a feature request or bug report

• I've read the guidelines for Contributing to Roots Projects
• This is a feature request
• This is a bug report
• This request isn't a duplicate of an existing issue
• I've read the docs and followed them (if applicable)
• This is not a personal support request that should be posted on the Roots Discourse forums

---

What is the current behavior?
While (re)applying the server playbook nginx fails to restart, can't continued.

What is the expected or desired behavior?
Playbook is applied correctly, nginx still runs afterwards.

---

Bug report

Please provide steps to reproduce, including full log output:

Updated Trellis with latest code from this repository.

• Apply playbook on existing Trellis server.
• Playbook fails (nginx fails to restart correctly).
• nginx fails to load/find the /etc/nginx/ssl/no_default.cert and
  it isn't generated by playbook either.
• I had to generate a self-signed cert manually for
  making nginx restart and the playbook being able to proceed.

Please describe your local environment:
Ansible version: 2.4.30
OS: WSL

Where did the bug happen? Development or remote servers?
Remote

[fullyint]

Any chance you have in your group_vars an override definition of nginx_sites_confs? If so, be sure to include the ssl.no-default.conf.j2 added in #888

In default Trellis, /etc/nginx/ssl/no_default.cert is created during the wordpress-setup role when at least one site in wordpress_sites has ssl enabled. If no site has ssl enabled, the ssl.no-default.conf should be disabled/unlinked and thus an Nginx start/restart/reload shouldn't try looking for the no_default.cert.

In other words, I don't know how the reported scenario could occur unless you have an (incomplete) override of nginx_sites_confs, or you applied an incomplete set of Trellis updates, or you ran an unusual subset of tasks (and with playbook failure).

Maybe you could share the output of

ansible-playbook server.yml -e env=production --tags wordpress -vvv

If you choose to excerpt the output, be sure to include these tasks:

• Generate self-signed certificates
• Create Nginx available sites
• Enable or disable Nginx sites
• Create WordPress configuration for Nginx
• the two nginx handler tasks at the end of the playbook
• any final error output at the end

[strarsis]

Yes, nginx_sites_confs was modified in main.yml and ssl.no-default.conf.j2 was still missing.