ansible-roles/evoacme/tasks/conf.yml
Jérémy Lecour ee21973371
All checks were successful
Ansible Lint |Total|New|Outstanding|Fixed|Trend |:-:|:-:|:-:|:-:|:-: |2777|524|2253|2462|:+1: Reference build: <a href="https://jenkins.evolix.org/job/gitea/job/ansible-roles/job/unstable/223//ansiblelint">Evolix » ansible-roles » unstable #223</a>
gitea/ansible-roles/pipeline/head This commit looks good
Use FQCN
Fully Qualified Collection Name
2023-03-20 23:33:19 +01:00

34 lines
1 KiB
YAML

---
- community.general.ini_file:
dest: "{{ evoacme_crt_dir }}/openssl.cnf"
section: 'req'
option: "{{ item.name }}"
value: "{{ item.var }}"
loop:
- { name: 'default_bits', var: "{{ evoacme_ssl_key_size }}" }
- { name: 'encrypt_key', var: 'yes' }
- { name: 'distinguished_name', var: 'req_dn' }
- { name: 'prompt', var: 'no' }
- name: Update openssl conf
community.general.ini_file:
dest: "{{ evoacme_crt_dir }}/openssl.cnf"
section: 'req_dn'
option: "{{ item.name }}"
value: "{{ item.var }}"
loop:
- { name: 'C', var: "{{ evoacme_ssl_ct }}" }
- { name: 'ST', var: "{{ evoacme_ssl_state }}" }
- { name: 'L', var: "{{ evoacme_ssl_loc }}" }
- { name: 'O', var: "{{ evoacme_ssl_org }}" }
- { name: 'OU', var: "{{ evoacme_ssl_ou }}" }
- { name: 'emailAddress', var: "{{ evoacme_ssl_email }}" }
- name: Copy new evoacme conf
ansible.builtin.template:
src: templates/evoacme.conf.j2
dest: /etc/default/evoacme
owner: root
group: root
mode: "0644"