@donaldball
…and it seems like •all• of the pieces are there for Docker Compose to be exactly this thing we both assumed Docker was upon hearing about it, but…

…

@inthehands LE is not the most natural match with ansible.

The latter is at its best where you can just drop shit in place using ansible as the source.

But you might want to look into acme dns. I find it a lot less painful than the get a cert for the service *through* the service chicken and egg conundrum.

Though that’s still a pain to deploy through ansible.

@inthehands there are community ansible modules in the crypto library that may work, or you can just ansiblize the certbot command with the shell module which for simple task trace'n'track may be easier .. an example only: https://itsfoss.gitlab.io/post/how-to-setup-auto-renew-for-lets-encrypt-ssl-certificates/

@inthehands . .. Containers are the excuse of Developers/Vendors to say "My code only works with these *Libraries*" .. but it's safe to run 'cause it's got C group isolation, so I can ignore it's maintenance for a long, long.. long time" despite external secrurity scans showing thier junk application code is riddled with CVE's not found in the OS vendor's back ported Repo packages deployed by Ansible nightly ...

@inthehands Ansible and Docker solve different problems, but I still feel ya. Ansible is more sensible.

There's a module now for it, might not have existed since the last time you played with it: https://docs.ansible.com/projects/ansible/latest/collections/community/crypto/acme_certificate_module.html

@inthehands Ansible is a nice long lever that can move a small world. Once I figured it out, it became the only way I manage my team's systems. Give yourself time to write good playbooks and test in staging.

@inthehands I've been told Podman is nice. https://docs.podman.io/en/latest/index.html

@inthehands For LE I use Traefik. It's really nice IMO.

@nivex
I just didn’t recognize that it •was• solid foundations!