Cf token with reportinator update #137
Open
+14
−14
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
The Cloudflare integration is done through the "magic" CF_DNS_API_TOKEN variable according to this info. This is set by the traefik role here which can be found in the encrypted file roles/traefik/vars/main.yml. So generated a global wildcard api token, that's the simples solution, I updated the secret with that and it will be used on every rerun of the playbooks for every instance. The token was generated for the full verse zone.
I only saw a dashboard for personal access tokens that I could use for this, but I don't know if someone else with more privileges sees something else but this is working.
I updated the reportinator server to test this and use it to fix some stuff like missing ansible fun. So now we have tagr.nos.social and it's working fine with fresh ssl certs.