2017-07-03 18:22:24 +02:00
|
|
|
---
|
|
|
|
|
|
|
|
|
|
|
|
- name: ssl-cert package is installed
|
2023-03-20 23:33:19 +01:00
|
|
|
ansible.builtin.apt:
|
2017-07-03 18:22:24 +02:00
|
|
|
name: ssl-cert
|
|
|
|
state: present
|
|
|
|
|
|
|
|
- name: Create private key and csr for default site ({{ ansible_fqdn }})
|
2023-03-20 23:33:19 +01:00
|
|
|
ansible.builtin.command:
|
|
|
|
cmd: openssl req -newkey rsa:2048 -sha256 -nodes -keyout /etc/ssl/private/{{ evoadmin_host }}.key -out /etc/ssl/{{ evoadmin_host }}.csr -batch -subj "/CN={{ evoadmin_host }}"
|
2017-07-03 18:22:24 +02:00
|
|
|
args:
|
|
|
|
creates: "/etc/ssl/private/{{ evoadmin_host }}.key"
|
|
|
|
|
|
|
|
- name: Adjust rights on private key
|
2023-03-20 23:33:19 +01:00
|
|
|
ansible.builtin.file:
|
2017-07-03 18:22:24 +02:00
|
|
|
path: /etc/ssl/private/{{ evoadmin_host }}.key
|
|
|
|
owner: root
|
|
|
|
group: ssl-cert
|
|
|
|
mode: "0640"
|
|
|
|
|
|
|
|
- name: Create certificate for default site
|
2023-03-20 23:33:19 +01:00
|
|
|
ansible.builtin.command:
|
|
|
|
cmd: openssl x509 -req -days 3650 -sha256 -in /etc/ssl/{{ evoadmin_host }}.csr -signkey /etc/ssl/private/{{ evoadmin_host }}.key -out /etc/ssl/certs/{{ evoadmin_host }}.crt
|
2017-07-03 18:22:24 +02:00
|
|
|
args:
|
|
|
|
creates: "/etc/ssl/certs/{{ evoadmin_host }}.crt"
|