foo.sh/ansible
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

use global variable for default certificate bundle location

Browse source
This commit is contained in:
Timo Makinen 2019-05-28 21:22:14 +03:00
parent 1a4aec1b66
commit e0b519cf21
3 changed files with 3 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
group_vars/all.yml
View file

@ -25,6 +25,7 @@ tls_ciphers_compat: ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:EC
# defaults for tls diretories # defaults for tls diretories
tls_certs: /etc/pki/tls/certs tls_certs: /etc/pki/tls/certs
tls_private: /etc/pki/tls/private tls_private: /etc/pki/tls/private
tls_bundle: /etc/pki/tls/cert.pem
# hardcode this for now # hardcode this for now
ansible_datacenter: home ansible_datacenter: home

1
group_vars/openbsd.yml
View file

@ -8,6 +8,7 @@ ansible_wheel: wheel
# fix tls directories # fix tls directories
tls_certs: /etc/ssl tls_certs: /etc/ssl
tls_private: /etc/ssl/private tls_private: /etc/ssl/private
tls_bundle: "{{ tls_certs }}/cert.pem"
# default resources for new vm # default resources for new vm
dsk_size: 10 dsk_size: 10

2
roles/ldap/client/templates/ldap.conf.j2
View file

@ -2,5 +2,5 @@
BASE {{ ldap_basedn }} BASE {{ ldap_basedn }}
URI {% for item in ldap_server %}ldaps://{{ item }} {% endfor %} URI {% for item in ldap_server %}ldaps://{{ item }} {% endfor %}
TLS_CACERT {{ tls_certs }}/cert.pem TLS_CACERT {{ tls_bundle }}
TLS_REQCERT demand TLS_REQCERT demand