forked from infra/ansible
16 lines
595 B
YAML
16 lines
595 B
YAML
|
---
|
||
|
|
|
||
|
|
#- name: Ensure certificates are available
|
||
|
|
# command: openssl req -x509 -nodes -newkey rsa:2048 -keyout /etc/nginx/ssl/{{ pizza_domain }}.key -out /etc/nginx/ssl/{{ pizza_domain }}.crt -days 730 -subj "/CN={{ pizza_domain }}" creates=/etc/nginx/ssl/{{ pizza_domain }}.crt
|
||
|
|
# notify: Restart nginx
|
||
|
|
|
||
|
|
- name: Request nsupdate key for certificate
|
||
|
|
include_role: name=acme-dnskey-generate
|
||
|
|
vars:
|
||
|
|
acme_dnskey_san_domains:
|
||
|
|
- "{{ pizza_domain }}"
|
||
|
|
|
||
|
|
- name: Configure certificate manager for pizza
|
||
|
|
template: src=certs.j2 dest=/etc/acertmgr/{{ pizza_domain }}.conf
|
||
|
|
notify: Run acertmgr
|