From b11d946a440ac0100263d2836bcbd7af3349b5f6 Mon Sep 17 00:00:00 2001
From: classabbyamp <void@placeviolette.net>
Date: Mon, 15 Jul 2024 01:48:35 -0400
Subject: [PATCH] ansible: decommission acmetool

acmetool is a submodule role so decommission it with a new role
---
 ansible/build.yml                       |  2 +-
 ansible/roles/unacmetool/tasks/main.yml | 28 +++++++++++++++++++++++++
 2 files changed, 29 insertions(+), 1 deletion(-)
 create mode 100644 ansible/roles/unacmetool/tasks/main.yml

diff --git a/ansible/build.yml b/ansible/build.yml
index 3534e14..4f194f8 100644
--- a/ansible/build.yml
+++ b/ansible/build.yml
@@ -4,8 +4,8 @@
   become_user: root
   become_method: sudo
   roles:
-    - acmetool
     - buildmaster
+    - unacmetool
 
 - hosts: buildslave
   become: yes
diff --git a/ansible/roles/unacmetool/tasks/main.yml b/ansible/roles/unacmetool/tasks/main.yml
new file mode 100644
index 0000000..a6d9eac
--- /dev/null
+++ b/ansible/roles/unacmetool/tasks/main.yml
@@ -0,0 +1,28 @@
+---
+- name: Remove acmetool data root
+  file:
+    path: /var/lib/acme
+    state: absent
+
+- name: Remove renewal crontab
+  file:
+    path: /etc/cron.d/acmetool
+    state: absent
+
+- name: Remove acmetool firewall rules
+  file:
+    path: /etc/iptables.d/acmetool.rules
+    state: absent
+  notify:
+    - iptables
+
+- name: Remove Service Hooks
+  file:
+    path: /usr/libexec/acme/hooks/sv_restart
+    state: absent
+  when: acmetool.services is defined
+
+- name: Remove acmetool
+  xbps:
+    pkg: acmetool
+    state: absent