sshca: First version of role

roles/sshca/tasks/main.yml

@@ -0,0 +1,36 @@
+---
+- name: Create datadirectories
+  ansible.builtin.file:
+    path: "{{ item }}"
+    state: directory
+    mode: "0755"
+    owner: root
+    group: "{{ ansible_wheel }}"
+  with_items:
+    - /export/sshca
+    - /export/sshca/pubkeys
+
+- name: Create CA directory
+  ansible.builtin.file:
+    path: "/export/ssh/ca"
+    state: directory
+    mode: "0700"
+    owner: root
+    group: "{{ ansible_wheel }}"
+
+- name: Link datadirectory
+  ansible.builtin.file:
+    dest: /srv/sshca
+    src: /export/sshca
+    state: link
+    owner: root
+    group: "{{ ansible_wheel }}"
+    follow: false
+
+- name: Copy signing script
+  ansible.builtin.copy:
+    dest: /srv/sshca/signcert.sh
+    src: signcert.sh
+    mode: "0755"
+    owner: root
+    group: "{{ ansible_wheel }}"