xoxys.ucs/tasks/tls.yml

65 lines
2.1 KiB
YAML
Raw Normal View History

2018-08-04 20:23:06 +00:00
---
- block:
2019-01-09 21:33:12 +00:00
- name: Create tls folder structure
file:
path: "{{ item }}"
state: directory
2021-02-04 21:55:00 +00:00
mode: 0700
2019-08-27 06:25:49 +00:00
loop:
2019-01-09 21:33:12 +00:00
- "{{ ucs_tls_certs_dir }}"
- "{{ ucs_tls_key_dir }}"
2018-08-04 20:23:06 +00:00
2019-01-09 21:33:12 +00:00
- name: Copy certs and private key
copy:
src: "{{ item.src }}"
dest: "{{ item.dest }}"
2019-01-09 21:36:29 +00:00
mode: "{{ item.mode }}"
2019-08-27 06:25:49 +00:00
loop:
2019-01-09 21:33:12 +00:00
- { src: "{{ ucs_tls_cert_path }}", dest: "{{ ucs_tls_certs_dir }}/ucs.pem", mode: '0600' }
- { src: "{{ ucs_tls_key_path }}", dest: "{{ ucs_tls_key_dir }}/ucs.pem", mode: '0750' }
loop_control:
label: "{{ item.dest }}"
notify:
- __ucs_apache_restart
- __ucs_dovecot_restart
- __ucs_postfix_restart
2018-08-04 20:48:43 +00:00
2019-01-09 21:33:12 +00:00
- name: Set apache2 ucr vars
ucr:
path: "{{ item.path }}"
value: "{{ item.value }}"
2019-08-27 06:25:49 +00:00
loop:
2019-01-09 21:33:12 +00:00
- { path: apache2/ssl/certificate, value: "{{ ucs_tls_certs_dir }}/ucs.pem" }
- { path: apache2/ssl/key, value: "{{ ucs_tls_key_dir }}/ucs.pem" }
loop_control:
2019-01-09 21:36:29 +00:00
label: "variable: {{ item.path }}={{ item.value }}"
2019-01-09 21:33:12 +00:00
notify: __ucs_apache_restart
when: ucs_custom_tls_apache2_enabled
2018-08-04 21:30:31 +00:00
2019-01-09 21:33:12 +00:00
- name: Set dovecot ucr vars
ucr:
path: "{{ item.path }}"
value: "{{ item.value }}"
2019-08-27 06:25:49 +00:00
loop:
2019-01-09 21:33:12 +00:00
- { path: mail/dovecot/ssl/certificate, value: "{{ ucs_tls_certs_dir }}/ucs.pem" }
- { path: mail/dovecot/ssl/key, value: "{{ ucs_tls_key_dir }}/ucs.pem" }
loop_control:
2019-01-09 21:36:29 +00:00
label: "variable: {{ item.path }}={{ item.value }}"
2019-01-09 21:33:12 +00:00
notify: __ucs_dovecot_restart
when: ucs_custom_tls_dovecot_enabled
2018-08-04 21:30:31 +00:00
2019-01-09 21:33:12 +00:00
- name: Set postfix ucr vars
ucr:
path: "{{ item.path }}"
value: "{{ item.value }}"
2019-08-27 06:25:49 +00:00
loop:
2019-01-09 21:33:12 +00:00
- { path: mail/postfix/ssl/certificate, value: "{{ ucs_tls_certs_dir }}/ucs.pem" }
- { path: mail/postfix/ssl/key, value: "{{ ucs_tls_key_dir }}/ucs.pem" }
loop_control:
2019-01-09 21:36:29 +00:00
label: "variable: {{ item.path }}={{ item.value }}"
2019-01-09 21:33:12 +00:00
notify: __ucs_postfix_restart
when: ucs_custom_tls_postfix_enabled
2018-08-04 20:23:06 +00:00
become: True
become_user: root
2018-08-04 21:31:40 +00:00
when: ucs_custom_tls_enabled