From add84ba1d209a3e393980dc3ae179bc8de18827d Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Ga=C5=A1per=20Fele-=C5=BDor=C5=BE?= <polz@fri.uni-lj.si>
Date: Tue, 10 Sep 2024 15:06:53 +0200
Subject: [PATCH] proxmox-backup: set domain for ACME

---
 roles/proxmox-backup/tasks/main.yml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/roles/proxmox-backup/tasks/main.yml b/roles/proxmox-backup/tasks/main.yml
index 81f3a88..0ee4e60 100644
--- a/roles/proxmox-backup/tasks/main.yml
+++ b/roles/proxmox-backup/tasks/main.yml
@@ -82,5 +82,10 @@
         enabled: no
       notify: reboot
 
+- name: Set domain for ACME certificate renewals
+  command:
+    cmd: 'proxmox-backup-manager node update --acmedomain0 domain={{ interfaces | selectattr("name", "==", "lo")
+             | map(attribute="ip_addresses") | flatten | map(attribute="dns_name") | first }}'
+  changed_when: false # maybe write a proper check if certificate requests are ever ansibled
 
 - include_tasks: firewall.yml