kishi/infra
1
0
Fork 0
forked from infra/ansible
Code Releases Activity

nginx: don't use "== True"

Browse Source
This commit is contained in:
Markus 2020-06-20 17:22:23 +02:00
parent 47cccdd42a
commit a42b34b3ec
1 changed files with 5 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
roles/nginx/tasks/main.yml
View File

@ -5,21 +5,21 @@
- name: Create certificate directory - name: Create certificate directory
file: path=/etc/nginx/ssl state=directory mode=0750 file: path=/etc/nginx/ssl state=directory mode=0750
when: nginx_ssl == True when: nginx_ssl
- name: Ensure certificates are available - name: Ensure certificates are available
command: openssl req -x509 -nodes -newkey rsa:2048 -keyout /etc/nginx/ssl/{{ ansible_fqdn }}.key -out /etc/nginx/ssl/{{ ansible_fqdn }}.crt -days 730 -subj "/CN={{ ansible_fqdn }}" creates=/etc/nginx/ssl/{{ ansible_fqdn }}.crt command: openssl req -x509 -nodes -newkey rsa:2048 -keyout /etc/nginx/ssl/{{ ansible_fqdn }}.key -out /etc/nginx/ssl/{{ ansible_fqdn }}.crt -days 730 -subj "/CN={{ ansible_fqdn }}" creates=/etc/nginx/ssl/{{ ansible_fqdn }}.crt
when: nginx_ssl == True when: nginx_ssl
notify: Restart nginx notify: Restart nginx
- name: Ensure correct certificate permissions - name: Ensure correct certificate permissions
file: path=/etc/nginx/ssl/{{ ansible_fqdn }}.key owner=root mode=0400 file: path=/etc/nginx/ssl/{{ ansible_fqdn }}.key owner=root mode=0400
when: nginx_ssl == True when: nginx_ssl
notify: Restart nginx notify: Restart nginx
- name: Create DH parameters - name: Create DH parameters
command: openssl dhparam -outform PEM -out {{ item }} 2048 creates={{ item }} command: openssl dhparam -outform PEM -out {{ item }} 2048 creates={{ item }}
when: nginx_ssl == True when: nginx_ssl
with_items: with_items:
- /etc/nginx/dhparam.pem - /etc/nginx/dhparam.pem
@ -29,7 +29,7 @@
- name: Configure default vhost - name: Configure default vhost
template: src=default.j2 dest=/etc/nginx/sites-available/default template: src=default.j2 dest=/etc/nginx/sites-available/default
when: nginx_ssl == True when: nginx_ssl
notify: Restart nginx notify: Restart nginx
- name: Start nginx - name: Start nginx