uids

Move these to group_vars/all certbot 2001 haproxy 2002 wiki 2003 webmisc 2004

haproxy

Direct /postdeploy to the webhook container, POST only Direct / to the wiki container, GET, HEAD only

certbot

Run manually once with an ansble 'creates' directive via docker, mounting /etc/letsencrypt. Cat the files for haproxy pem chain (already covered by the post hook?) Spec –cert-name to 'this' so we don't have to hard code domains in the scripts

Wiki

Push to docker hub Filter everything except GET at haproxy with the appropriate acl Mount the /var/run/repos/wiki dir at /wiki

webmisc

Dunno.

DO

createdroplet -t permanent -t wiki -i centos-7-x64 -r lon1 -n wiki-lon1