mod_auth_gssapi: Set keytab path in environment variables

roles/mod_auth_gssapi/files/gssapi.conf

@@ -1,3 +0,0 @@
-<Location />
-  GssapiCredStore keytab:/etc/httpd/httpd.keytab
-</Location>

roles/mod_auth_gssapi/tasks/main.yml

@@ -5,10 +5,18 @@
     state: installed
   notify: restart apache
 
+- name: create httpd service drop-in directory
+  file:
+    path: /etc/systemd/system/httpd.service.d
+    state: directory
+    mode: 0755
+    owner: root
+    group: "{{ ansible_wheel }}"
+
 - name: set keytab path
   copy:
-    dest: /etc/httpd/conf.local.d/00-gssapi.conf
+    dest: /etc/systemd/system/httpd.service.d/keytab.conf
-    src: gssapi.conf
+    content: "[Service]\nEnvironment=KRB5_KTNAME=/etc/httpd/httpd.keytab\n"
     mode: 0644
     owner: root
     group: "{{ ansible_wheel }}"