From 2f43ae3d10dcba9bf70f008ef006122b1613f225 Mon Sep 17 00:00:00 2001
From: Joe Carstairs <me@joeac.net>
Date: Wed, 29 Jul 2026 18:28:50 +0100
Subject: move tls cert management from make to ansible

---
 ansible/roles/tls/files/certbot.fact | 35 +++++++++++++++++++++++++++++++++++
 1 file changed, 35 insertions(+)
 create mode 100644 ansible/roles/tls/files/certbot.fact

(limited to 'ansible/roles/tls/files/certbot.fact')

diff --git a/ansible/roles/tls/files/certbot.fact b/ansible/roles/tls/files/certbot.fact
new file mode 100644
index 0000000..baa43bb
--- /dev/null
+++ b/ansible/roles/tls/files/certbot.fact
@@ -0,0 +1,35 @@
+#!/bin/sh
+
+certbot_certificates_output="$(certbot certificates 2>/dev/null)"
+certificates="$(echo "$certbot_certificates_output" | grep "Certificate Name:" | sed "s/.*Certificate Name: *//g")"
+all_certificates=""
+valid_certificates=""
+invalid_certificates=""
+for certificate in $certificates
+do
+  all_certificates="$all_certificates $certificate"
+  if [ -n "$(echo "$certbot_certificates_output" | grep "Expiry Date:" | grep -E "VALID:")" ]
+  then
+    valid_certificates="$valid_certificates $certificate"
+  else
+    invalid_certificates="$invalid_certificates $certificate"
+  fi
+done
+
+jsonify()
+{
+  if [ -z "$1" ]
+  then
+    echo "[]"
+  else
+    echo "[\"$1\"]" | sed "s/ /\", \"/g"
+  fi
+}
+
+cat <<EOF
+{
+  "certificates": $(jsonify "$all_certificates"),
+  "invalid_certificates": $(jsonify "$invalid_certificates"),
+  "valid_certificates": $(jsonify "$valid_certificates")
+}
+EOF
-- 
cgit v1.2.3