Update pkg.cloudflare.com urls

[siriusnottin]

See pkg.cloudflare.com changes · Issue #719 · cloudflare/cloudflared

[tangrufus]

Question: Should we change xenial to something else for ubuntu 20.04?

[siriusnottin]

Oh right, so something like this:

Suggested change

	repo: 'deb http://pkg.cloudflare.com/cloudflared xenial main'
	repo: 'deb http://pkg.cloudflare.com/cloudflared bullseye main'

I'm not sure if more recent versions of Debian/Ubuntu works as intended while asking for a specific release version. I'm still new to Linux, any thoughts on this?

[fhuyghe]

Is there any way to test this out through Galaxy? A couple of my projects are on standby until this is fixed and I can't find a way to use anything other than the broken master branch

[tangrufus]

You can install @siriusnottin's version by https://docs.ansible.com/ansible/latest/galaxy/user_guide.html#installing-a-specific-version-of-a-role

Please report back, especially whether we should use xenial or bullseye or something else AND whether it works on a fresh server.

[tangrufus]

I believe the new ppa doesn't contains the cfca package.

See: #60 (comment)

[fhuyghe]

Thanks for the help @tangrufus. It did not seem to accept PRs (getting the error fatal: reference is not a tree) but works with my own forked version of the repo.
As you suggested it fails at the "Install CFCA" stage so we'll have to wait as they seem to be working on it.

[tangrufus]

Seems Cloudflare has no ETA on adding back cfca to the ppa and recommands downloading the certs via dashboard.
Anyone know any CLI alternatives to cfca?

See:

• pkg.cloudflare.com changes cloudflare/cloudflared#719 (comment)
• pkg.cloudflare.com changes cloudflare/cloudflared#719 (comment)

[siriusnottin]

I think you have to use their API if you want to bypass the Cloudflare dashboard now?

See:

• Origin CA certificates · Cloudflare SSL/TLS docs
• Cloudflare API v4 Documentation

[tangrufus]

Yes for the API.
This role is “un-usable” until someone make a cfca alternative.

---

With the financial crisis brewing, I don’t think I have the luxury to spend time creating one in near future.

Best I can do is to update the readme to document how to use the web dashboard to download the certs and add them to trellis as manual certs.

Thank you everyone for using/debugging this role. Sorry for the disappointment.

[siriusnottin]

No problem, thanks for your answer!

I'd like to help if I have more time I'll commit once finished if it's embeddable in this repo or a separate project as a bash script maybe depending on what's more convenient and what suits you.

Thank you for your work, I discover ansible recently and I learn little by little as I code not much these days.