summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorMatthew Fennell <matthew@fennell.dev>2024-07-27 10:24:46 +0100
committerMatthew Fennell <matthew@fennell.dev>2024-07-27 10:24:46 +0100
commitac0289d88e212e6ba0e21b4a7bb135047047576b (patch)
treefc6ce9262b12e9c07d981d0e705acedeb8561cd4
parentad5c003a2d9549b9d61d89714884a7da548e2092 (diff)
Do not manage CAA records in the playbook
These vary significantly from deployment to deployment, and running this playbook previously caused issues on fennell.dev deployments, where I need to be able to deploy certificates by other means.
-rw-r--r--playbook.yaml8
1 files changed, 0 insertions, 8 deletions
diff --git a/playbook.yaml b/playbook.yaml
index 64c0243..96d7119 100644
--- a/playbook.yaml
+++ b/playbook.yaml
@@ -170,14 +170,6 @@
type: TLSA
ttl: 3600
records: ["3 1 1 {{ dane_hash.stdout }}"]
- - subname: ""
- type: CAA
- ttl: 3600
- records:
- - "0 issue \"letsencrypt.org;validationmethods=dns-01;accounturi=\
- {{ acme_account_uri_prod }}\""
- - "0 issue \"letsencrypt.org;validationmethods=dns-01;accounturi=\
- {{ acme_account_uri_nonprod }}\""
delegate_to: localhost
- name: Ensure anonymous records are added to subdomain, if needed