diff --git a/tasks/deployer.yml b/tasks/deployer.yml index d645d8e..8d50703 100644 --- a/tasks/deployer.yml +++ b/tasks/deployer.yml @@ -557,6 +557,9 @@ loop_var: "cert" when: - config.openssl.certificates[cert].issuer is undefined + tags: + - openssl + - www - name: "Deployer - OpenSSL - Configure - Generate Certificate / Intermediate" community.crypto.x509_certificate: @@ -575,6 +578,9 @@ when: - config.openssl.certificates[cert].domains is undefined - config.openssl.certificates[cert].issuer is defined + tags: + - openssl + - www - name: "Deployer - OpenSSL - Configure - Generate Certificate / Service" community.crypto.x509_certificate: @@ -593,6 +599,40 @@ when: - config.openssl.certificates[cert].domains is defined - config.openssl.certificates[cert].issuer is defined + tags: + - openssl + - www + +- name: "Deployer - OpenSSL - Configure - Generate Fullchain" + community.crypto.certificate_complete_chain: + chain: + - "/root/data/openssl/{{ cert }}/cert.pem" + - "/root/data/openssl/{{ config.openssl.certificates[cert].issuer }}/cert.pem" + path: "/root/data/openssl/{{ cert }}/fullchain.pem" + loop: "{{ config.openssl.certificates.keys() | list }}" + loop_control: + label: "{{ cert }}" + loop_var: "cert" + when: + - config.openssl.certificates[cert].issuer is defined + tags: + - openssl + - www + +- name: "Deployer - OpenSSL - Configure - Generate Chain" + community.crypto.certificate_complete_chain: + chain: + - "/root/data/openssl/{{ config.openssl.certificates[cert].issuer }}/cert.pem" + path: "/root/data/openssl/{{ cert }}/chain.pem" + loop: "{{ config.openssl.certificates.keys() | list }}" + loop_control: + label: "{{ cert }}" + loop_var: "cert" + when: + - config.openssl.certificates[cert].issuer is defined + tags: + - openssl + - www - name: "Deployer - Nginx - Configure - Create Folder" ansible.builtin.file: