foo.sh/ansible
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Tag all certificate and key copying

Browse source
This commit is contained in:
Timo Makinen 2020-09-28 15:17:26 +00:00
parent 939edd1cdd
commit f543d599af
5 changed files with 11 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
roles/dovecot/tasks/main.yml
View file

@ -15,6 +15,7 @@
with_first_found: with_first_found:
- "/srv/letsencrypt/live/{{ mail_server }}/privkey.pem" - "/srv/letsencrypt/live/{{ mail_server }}/privkey.pem"
- "/srv/ca/private/{{ inventory_hostname }}.key" - "/srv/ca/private/{{ inventory_hostname }}.key"
tags: certificates
notify: restart dovecot notify: restart dovecot
- name: install certificate - name: install certificate
@ -27,6 +28,7 @@
with_first_found: with_first_found:
- "/srv/letsencrypt/live/{{ mail_server }}/fullchain.pem" - "/srv/letsencrypt/live/{{ mail_server }}/fullchain.pem"
- "/srv/ca/certs/{{ inventory_hostname }}.crt" - "/srv/ca/certs/{{ inventory_hostname }}.crt"
tages: certificates
notify: restart dovecot notify: restart dovecot
- name: create local config - name: create local config

3
roles/ldap/server/tasks/main.yml
View file

@ -80,6 +80,7 @@
mode: 0644 mode: 0644
owner: root owner: root
group: "{{ ansible_wheel }}" group: "{{ ansible_wheel }}"
tags: certificates
notify: restart slapd notify: restart slapd
- name: copy ldap server key - name: copy ldap server key
copy: copy:
@ -88,6 +89,7 @@
mode: 0640 mode: 0640
owner: root owner: root
group: ldap group: ldap
tags: certificates
notify: restart slapd notify: restart slapd
- name: copy ldap server certificate chain - name: copy ldap server certificate chain
copy: copy:
@ -96,6 +98,7 @@
mode: 0644 mode: 0644
owner: root owner: root
group: "{{ ansible_wheel }}" group: "{{ ansible_wheel }}"
tags: certificates
notify: restart slapd notify: restart slapd
- name: get ldap server chain hash - name: get ldap server chain hash
command: "openssl x509 -in /srv/letsencrypt/live/{{ ldap_server_cert }}/chain.pem -noout -hash" command: "openssl x509 -in /srv/letsencrypt/live/{{ ldap_server_cert }}/chain.pem -noout -hash"

2
roles/nginx/site/tasks/main.yml
View file

@ -28,6 +28,7 @@
- "/srv/letsencrypt/live/{{ site }}/privkey.pem" - "/srv/letsencrypt/live/{{ site }}/privkey.pem"
- "/srv/ca/private/{{ site }}.key" - "/srv/ca/private/{{ site }}.key"
- "/srv/ca/private/{{ inventory_hostname }}.key" - "/srv/ca/private/{{ inventory_hostname }}.key"
tags: certificates
notify: restart nginx notify: restart nginx
- name: "copy site certificate for {{ site }}" - name: "copy site certificate for {{ site }}"
@ -41,4 +42,5 @@
- "/srv/letsencrypt/live/{{ site }}/fullchain.pem" - "/srv/letsencrypt/live/{{ site }}/fullchain.pem"
- "/srv/ca/certs/{{ site }}.crt" - "/srv/ca/certs/{{ site }}.crt"
- "/srv/ca/certs/{{ inventory_hostname }}.crt" - "/srv/ca/certs/{{ inventory_hostname }}.crt"
tags: certificates
notify: restart nginx notify: restart nginx

2
roles/nsd/tasks/main.yml
View file

@ -10,6 +10,7 @@
- "/srv/letsencrypt/live/{{ nsd_server }}/privkey.pem" - "/srv/letsencrypt/live/{{ nsd_server }}/privkey.pem"
- "/srv/ca/private/{{ nsd_server }}.key" - "/srv/ca/private/{{ nsd_server }}.key"
- "/srv/ca/private/{{ inventory_hostname }}.key" - "/srv/ca/private/{{ inventory_hostname }}.key"
tags: certificates
notify: restart nsd notify: restart nsd
- name: copy server key - name: copy server key
@ -23,6 +24,7 @@
- "/srv/letsencrypt/live/{{ nsd_server }}/fullchain.pem" - "/srv/letsencrypt/live/{{ nsd_server }}/fullchain.pem"
- "/srv/ca/certs/{{ site }}.crt" - "/srv/ca/certs/{{ site }}.crt"
- "/srv/ca/certs/{{ inventory_hostname }}.crt" - "/srv/ca/certs/{{ inventory_hostname }}.crt"
tags: certificates
notify: restart nsd notify: restart nsd
- name: create nsd config - name: create nsd config

2
roles/syslogd/tasks/server.yml
View file

@ -26,6 +26,7 @@
mode: 0600 mode: 0600
owner: root owner: root
group: "{{ ansible_wheel }}" group: "{{ ansible_wheel }}"
tags: certificates
- name: copy server crt - name: copy server crt
copy: copy:
@ -34,6 +35,7 @@
mode: 0644 mode: 0644
owner: root owner: root
group: "{{ ansible_wheel }}" group: "{{ ansible_wheel }}"
tags: certificates
- name: add archiving to syslog.conf - name: add archiving to syslog.conf
blockinfile: blockinfile: