tom/ansible
1
0
Fork 0
forked from infra/ansible
Code Issues Pull Requests Projects Releases Wiki Activity

Fix certmgr actions for cron usage.

Browse Source
This commit is contained in:
Markus 2017-02-28 14:48:03 +01:00
parent e7e49f356f
commit 2978ef8177
8 changed files with 17 additions and 18 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
roles/certmgr/tasks/main.yml
View File

@ -42,4 +42,3 @@
- name: Enable acertmgr cronjob - name: Enable acertmgr cronjob
cron: name=certmgr special_time=daily job=/opt/acertmgr/acertmgr.py cron: name=certmgr special_time=daily job=/opt/acertmgr/acertmgr.py
tags: certmgr

4
roles/gogs/templates/certs.j2
View File

@ -6,10 +6,10 @@
group: root group: root
perm: '400' perm: '400'
format: key format: key
action: 'service nginx restart' action: '/usr/sbin/service nginx restart'
- path: /etc/nginx/ssl/{{ gogs_domain }}.crt - path: /etc/nginx/ssl/{{ gogs_domain }}.crt
user: root user: root
group: root group: root
perm: '400' perm: '400'
format: crt,ca format: crt,ca
action: 'service nginx restart' action: '/usr/sbin/service nginx restart'

8
roles/mail/templates/certs.j2
View File

@ -6,22 +6,22 @@
group: postfix group: postfix
perm: '400' perm: '400'
format: key format: key
action: 'service postfix restart' action: '/usr/sbin/service postfix restart'
- path: /etc/postfix/ssl/{{ mail_server }}.crt - path: /etc/postfix/ssl/{{ mail_server }}.crt
user: postfix user: postfix
group: postfix group: postfix
perm: '400' perm: '400'
format: crt,ca format: crt,ca
action: 'service postfix restart' action: '/usr/sbin/service postfix restart'
- path: /etc/dovecot/ssl/{{ mail_server }}.key - path: /etc/dovecot/ssl/{{ mail_server }}.key
user: dovecot user: dovecot
group: dovecot group: dovecot
perm: '400' perm: '400'
format: key format: key
action: 'service dovecot restart' action: '/usr/sbin/service dovecot restart'
- path: /etc/dovecot/ssl/{{ mail_server }}.crt - path: /etc/dovecot/ssl/{{ mail_server }}.crt
user: dovecot user: dovecot
group: dovecot group: dovecot
perm: '400' perm: '400'
format: crt,ca format: crt,ca
action: 'service dovecot restart' action: '/usr/sbin/service dovecot restart'

4
roles/mail/templates/mailman/certs.j2
View File

@ -6,10 +6,10 @@
group: root group: root
perm: '400' perm: '400'
format: key format: key
action: 'service nginx restart' action: '/usr/sbin/service nginx restart'
- path: /etc/nginx/ssl/{{ mailman_domain }}.crt - path: /etc/nginx/ssl/{{ mailman_domain }}.crt
user: root user: root
group: root group: root
perm: '400' perm: '400'
format: crt,ca format: crt,ca
action: 'service nginx restart' action: '/usr/sbin/service nginx restart'

4
roles/owncloud/templates/certs.j2
View File

@ -6,10 +6,10 @@
group: root group: root
perm: '400' perm: '400'
format: key format: key
action: 'service nginx restart' action: '/usr/sbin/service nginx restart'
- path: /etc/nginx/ssl/{{ owncloud_domain }}.crt - path: /etc/nginx/ssl/{{ owncloud_domain }}.crt
user: root user: root
group: root group: root
perm: '400' perm: '400'
format: crt,ca format: crt,ca
action: 'service nginx restart' action: '/usr/sbin/service nginx restart'

4
roles/prosody/templates/certs.j2
View File

@ -6,10 +6,10 @@
group: prosody group: prosody
perm: '400' perm: '400'
format: key format: key
action: 'service prosody restart' action: '/usr/sbin/service prosody restart'
- path: /etc/prosody/certs/{{ prosody_domain }}.crt - path: /etc/prosody/certs/{{ prosody_domain }}.crt
user: prosody user: prosody
group: prosody group: prosody
perm: '400' perm: '400'
format: crt,ca format: crt,ca
action: 'service prosody restart' action: '/usr/sbin/service prosody restart'

2
roles/slapd/tasks/main.yml
View File

@ -40,7 +40,7 @@
- name: Ensure certificates are available - name: Ensure certificates are available
command: openssl req -x509 -nodes -newkey rsa:2048 -keyout /etc/ldap/ssl/srv.key -out /etc/ldap/ssl/srv.crt -days 730 -subj "/CN={{ slapd_hostname }}" creates=/etc/ldap/ssl/srv.crt command: openssl req -x509 -nodes -newkey rsa:2048 -keyout /etc/ldap/ssl/srv.key -out /etc/ldap/ssl/srv.crt -days 730 -subj "/CN={{ slapd_hostname }}" creates=/etc/ldap/ssl/srv.crt
notify: Restart slapd notify: Restart slapd
tags: nginx tags: ldap
- name: Start slapd - name: Start slapd
service: name=slapd state=started enabled=yes service: name=slapd state=started enabled=yes

8
roles/web/files/certs
View File

@ -6,13 +6,13 @@ www.binary-kitchen.de binary-kitchen.de:
group: root group: root
perm: '400' perm: '400'
format: crt,ca format: crt,ca
action: 'service nginx restart' action: '/usr/sbin/service nginx restart'
- path: /etc/nginx/ssl/www.binary-kitchen.de.key - path: /etc/nginx/ssl/www.binary-kitchen.de.key
user: root user: root
group: root group: root
perm: '400' perm: '400'
format: key format: key
action: 'service nginx restart' action: '/usr/sbin/service nginx restart'
www.ccc-r.de: www.ccc-r.de:
- path: /etc/nginx/ssl/www.ccc-r.de.crt - path: /etc/nginx/ssl/www.ccc-r.de.crt
@ -20,10 +20,10 @@ www.ccc-r.de:
group: root group: root
perm: '400' perm: '400'
format: crt,ca format: crt,ca
action: 'service nginx restart' action: '/usr/sbin/service nginx restart'
- path: /etc/nginx/ssl/www.ccc-r.de.key - path: /etc/nginx/ssl/www.ccc-r.de.key
user: root user: root
group: root group: root
perm: '400' perm: '400'
format: key format: key
action: 'service nginx restart' action: '/usr/sbin/service nginx restart'