move tls to application space
This commit is contained in:
parent
3f89ba0254
commit
5fbd7dfc4e
|
@ -44,8 +44,8 @@ unifi_open_ports:
|
||||||
|
|
||||||
unifi_tls_enabled: False
|
unifi_tls_enabled: False
|
||||||
unifi_tls_pkcs12_passphrase: temppass
|
unifi_tls_pkcs12_passphrase: temppass
|
||||||
unifi_tls_certs_dir: /etc/pki/tls/certs
|
unifi_tls_certs_dir: "{{ unifi_base_dir }}/tls/certs"
|
||||||
unifi_tls_key_dir: /etc/pki/tls/private
|
unifi_tls_key_dir: "{{ unifi_base_dir }}/tls/private"
|
||||||
unifi_tls_cert_file: "{{ unifi_tls_certs_dir }}/mycert.pem"
|
unifi_tls_cert_file: "{{ unifi_tls_certs_dir }}/mycert.pem"
|
||||||
unifi_tls_key_file: "{{ unifi_tls_key_dir }}/mykey.pem"
|
unifi_tls_key_file: "{{ unifi_tls_key_dir }}/mykey.pem"
|
||||||
unifi_tls_source_use_content: False
|
unifi_tls_source_use_content: False
|
||||||
|
|
|
@ -4,11 +4,17 @@
|
||||||
file:
|
file:
|
||||||
path: "{{ item }}"
|
path: "{{ item }}"
|
||||||
state: directory
|
state: directory
|
||||||
|
owner: "{{ unifi_user }}"
|
||||||
|
group: "{{ unifi_group }}"
|
||||||
|
recurse: True
|
||||||
mode: 750
|
mode: 750
|
||||||
with_items:
|
with_items:
|
||||||
- "{{ unifi_tls_certs_dir }}"
|
- "{{ unifi_tls_certs_dir }}"
|
||||||
- "{{ unifi_tls_key_dir }}"
|
- "{{ unifi_tls_key_dir }}"
|
||||||
|
become: True
|
||||||
|
become_user: root
|
||||||
|
|
||||||
|
- block:
|
||||||
- name: Copy certs and private key (file)
|
- name: Copy certs and private key (file)
|
||||||
copy:
|
copy:
|
||||||
src: "{{ item.src }}"
|
src: "{{ item.src }}"
|
||||||
|
@ -33,7 +39,7 @@
|
||||||
label: "{{ item.dest }}"
|
label: "{{ item.dest }}"
|
||||||
register: __unifi_certs
|
register: __unifi_certs
|
||||||
become: True
|
become: True
|
||||||
become_user: root
|
become_user: "{{ unifi_user }}"
|
||||||
|
|
||||||
- block:
|
- block:
|
||||||
- set_fact:
|
- set_fact:
|
||||||
|
@ -78,5 +84,5 @@
|
||||||
path: "{{ __unifi_pkcs12_path }}"
|
path: "{{ __unifi_pkcs12_path }}"
|
||||||
state: absent
|
state: absent
|
||||||
become: True
|
become: True
|
||||||
become_user: root
|
become_user: "{{ unifi_user }}"
|
||||||
when: __unifi_certs.changed
|
when: __unifi_certs.changed
|
||||||
|
|
Loading…
Reference in New Issue
Block a user