enable to exclude configured domains from acme

Author: superstes

defaults/main/1_main.yml

@@ -33,6 +33,7 @@ defaults_haproxy:
     challenge_port: 8405  # port the webserver for challenge-responses listens on
     ca: 'letsencrypt'
     domains: []
+    domains_ignore: []
 
   geoip:
     enable: false

filter_plugins/utils.py

@@ -5,6 +5,7 @@ class FilterModule(object):
     def filters(self):
         return {
             "ensure_list": self.ensure_list,
+            "exclude": self.exclude,
             "is_string": self.is_string,
             "is_dict": self.is_dict,
             "safe_key": self.safe_key,
@@ -29,6 +30,11 @@ def ensure_list(data: (str, list)) -> list:
     def is_string(data) -> bool:
         return isinstance(data, str)
 
+    @classmethod
+    def exclude(cls, data: list, excludes: list) -> list:
+        data, excludes = cls.ensure_list(data), cls.ensure_list(excludes)
+        return [d for d in data if d not in excludes]
+
     @staticmethod
     def is_dict(data) -> bool:
         return isinstance(data, dict)

templates/etc/dehydrated/domains.txt.j2

@@ -9,13 +9,13 @@
 {%   set fe_cnf = defaults_frontend | combine(fe_cnf_user, recursive=true) %}
 # FRONTEND: {{ fe_name }}
 {%   if fe_cnf.acme.domains | default([]) | ensure_list | length > 0 %}
-{{ fe_cnf.acme.domains | default([]) | domains_not_routed(fe_cnf.routes) | join(' ') }} > {{ fe_name | safe_key }}
+{{ fe_cnf.acme.domains | default([]) | domains_not_routed(fe_cnf.routes) | exclude(HAPROXY_CONFIG.acme.domains_ignore) | join(' ') }} > {{ fe_name | safe_key }}
 {%   endif %}
 {%   for be_name, be_cnf_user in fe_cnf.routes.items() %}
 {%     set be_cnf = defaults_backend | combine(be_cnf_user, recursive=true) %}
 ## BACKEND: {{ be_name }}
-{%   if be_cnf.domains | default([]) | ensure_list | length > 0 %}
-{{ be_cnf.domains | default([]) | ensure_list | join(' ') }} > {{ fe_name | safe_key }}-{{ be_name | safe_key }}
-{%   endif %}
+{%     if be_cnf.domains | default([]) | ensure_list | length > 0 %}
+{{ be_cnf.domains | default([]) | ensure_list | exclude(HAPROXY_CONFIG.acme.domains_ignore) | join(' ') }} > {{ fe_name | safe_key }}-{{ be_name | safe_key }}
+{%     endif %}
 {%   endfor %}
 {% endfor %}