mirror of
https://github.com/cwchristerw/tjas-infra
synced 2025-09-09 23:12:51 +00:00
Update OpenSSL tasks
This commit is contained in:
@@ -557,6 +557,9 @@
|
||||
loop_var: "cert"
|
||||
when:
|
||||
- config.openssl.certificates[cert].issuer is undefined
|
||||
tags:
|
||||
- openssl
|
||||
- www
|
||||
|
||||
- name: "Deployer - OpenSSL - Configure - Generate Certificate / Intermediate"
|
||||
community.crypto.x509_certificate:
|
||||
@@ -575,6 +578,9 @@
|
||||
when:
|
||||
- config.openssl.certificates[cert].domains is undefined
|
||||
- config.openssl.certificates[cert].issuer is defined
|
||||
tags:
|
||||
- openssl
|
||||
- www
|
||||
|
||||
- name: "Deployer - OpenSSL - Configure - Generate Certificate / Service"
|
||||
community.crypto.x509_certificate:
|
||||
@@ -593,6 +599,40 @@
|
||||
when:
|
||||
- config.openssl.certificates[cert].domains is defined
|
||||
- config.openssl.certificates[cert].issuer is defined
|
||||
tags:
|
||||
- openssl
|
||||
- www
|
||||
|
||||
- name: "Deployer - OpenSSL - Configure - Generate Fullchain"
|
||||
community.crypto.certificate_complete_chain:
|
||||
chain:
|
||||
- "/root/data/openssl/{{ cert }}/cert.pem"
|
||||
- "/root/data/openssl/{{ config.openssl.certificates[cert].issuer }}/cert.pem"
|
||||
path: "/root/data/openssl/{{ cert }}/fullchain.pem"
|
||||
loop: "{{ config.openssl.certificates.keys() | list }}"
|
||||
loop_control:
|
||||
label: "{{ cert }}"
|
||||
loop_var: "cert"
|
||||
when:
|
||||
- config.openssl.certificates[cert].issuer is defined
|
||||
tags:
|
||||
- openssl
|
||||
- www
|
||||
|
||||
- name: "Deployer - OpenSSL - Configure - Generate Chain"
|
||||
community.crypto.certificate_complete_chain:
|
||||
chain:
|
||||
- "/root/data/openssl/{{ config.openssl.certificates[cert].issuer }}/cert.pem"
|
||||
path: "/root/data/openssl/{{ cert }}/chain.pem"
|
||||
loop: "{{ config.openssl.certificates.keys() | list }}"
|
||||
loop_control:
|
||||
label: "{{ cert }}"
|
||||
loop_var: "cert"
|
||||
when:
|
||||
- config.openssl.certificates[cert].issuer is defined
|
||||
tags:
|
||||
- openssl
|
||||
- www
|
||||
|
||||
- name: "Deployer - Nginx - Configure - Create Folder"
|
||||
ansible.builtin.file:
|
||||
|
Reference in New Issue
Block a user