[mod] tls roles: use loop for setting up directories

This commit is contained in:
Christian Fraß 2023-12-14 10:01:08 +01:00
parent 2f1cd74a79
commit 10a2e47a3f
4 changed files with 36 additions and 90 deletions

View file

@ -10,39 +10,21 @@
} }
}, },
{ {
"name": "setup directories | keys", "name": "directories | ssl",
"become": true, "become": true,
"loop": [
"{{var_tlscert_acme_inwx_ssl_directory}}/private",
"{{var_tlscert_acme_inwx_ssl_directory}}/csr",
"{{var_tlscert_acme_inwx_ssl_directory}}/certs",
"{{var_tlscert_acme_inwx_ssl_directory}}/fullchains"
],
"ansible.builtin.file": { "ansible.builtin.file": {
"state": "directory", "state": "directory",
"path": "{{var_tlscert_acme_inwx_ssl_directory}}/private" "path": "{{item}}"
} }
}, },
{ {
"name": "setup directories | certs", "name": "directories | Let's Encrypt account key",
"become": true,
"ansible.builtin.file": {
"state": "directory",
"path": "{{var_tlscert_acme_inwx_ssl_directory}}/certs"
}
},
{
"name": "setup directories | csr",
"become": true,
"ansible.builtin.file": {
"state": "directory",
"path": "{{var_tlscert_acme_inwx_ssl_directory}}/csr"
}
},
{
"name": "setup directories | fullchains",
"become": true,
"ansible.builtin.file": {
"state": "directory",
"path": "{{var_tlscert_acme_inwx_ssl_directory}}/fullchains"
}
},
{
"name": "setup directories | Let's Encrypt account key",
"become": true, "become": true,
"ansible.builtin.file": { "ansible.builtin.file": {
"state": "directory", "state": "directory",
@ -50,14 +32,14 @@
} }
}, },
{ {
"name": "csr | generate private key", "name": "key",
"become": true, "become": true,
"community.crypto.openssl_privatekey": { "community.crypto.openssl_privatekey": {
"path": "{{var_tlscert_acme_inwx_ssl_directory}}/private/{{var_tlscert_acme_inwx_domain_path}}.{{var_tlscert_acme_inwx_domain_base}}.pem" "path": "{{var_tlscert_acme_inwx_ssl_directory}}/private/{{var_tlscert_acme_inwx_domain_path}}.{{var_tlscert_acme_inwx_domain_base}}.pem"
} }
}, },
{ {
"name": "csr | execute", "name": "csr",
"become": true, "become": true,
"community.crypto.openssl_csr": { "community.crypto.openssl_csr": {
"common_name": "{{var_tlscert_acme_inwx_domain_path}}.{{var_tlscert_acme_inwx_domain_base}}", "common_name": "{{var_tlscert_acme_inwx_domain_path}}.{{var_tlscert_acme_inwx_domain_base}}",
@ -66,7 +48,7 @@
} }
}, },
{ {
"name": "acme | generate account key", "name": "acme | account key",
"become": true, "become": true,
"ansible.builtin.shell": { "ansible.builtin.shell": {
"cmd": "test -f {{var_tlscert_acme_inwx_acme_account_key_path}} || openssl genrsa 4096 > {{var_tlscert_acme_inwx_acme_account_key_path}}" "cmd": "test -f {{var_tlscert_acme_inwx_acme_account_key_path}} || openssl genrsa 4096 > {{var_tlscert_acme_inwx_acme_account_key_path}}"

View file

@ -20,39 +20,21 @@
} }
}, },
{ {
"name": "setup directories | keys", "name": "directories | ssl",
"become": true, "become": true,
"loop": [
"{{var_tlscert_acme_netcup_ssl_directory}}/private",
"{{var_tlscert_acme_netcup_ssl_directory}}/csr",
"{{var_tlscert_acme_netcup_ssl_directory}}/certs",
"{{var_tlscert_acme_netcup_ssl_directory}}/fullchains"
],
"ansible.builtin.file": { "ansible.builtin.file": {
"state": "directory", "state": "directory",
"path": "{{var_tlscert_acme_netcup_ssl_directory}}/private" "path": "{{item}}"
} }
}, },
{ {
"name": "setup directories | certs", "name": "directories | Let's Encrypt account key",
"become": true,
"ansible.builtin.file": {
"state": "directory",
"path": "{{var_tlscert_acme_netcup_ssl_directory}}/certs"
}
},
{
"name": "setup directories | csr",
"become": true,
"ansible.builtin.file": {
"state": "directory",
"path": "{{var_tlscert_acme_netcup_ssl_directory}}/csr"
}
},
{
"name": "setup directories | fullchains",
"become": true,
"ansible.builtin.file": {
"state": "directory",
"path": "{{var_tlscert_acme_netcup_ssl_directory}}/fullchains"
}
},
{
"name": "setup directories | Let's Encrypt account key",
"become": true, "become": true,
"ansible.builtin.file": { "ansible.builtin.file": {
"state": "directory", "state": "directory",
@ -60,14 +42,14 @@
} }
}, },
{ {
"name": "csr | generate private key", "name": "key",
"become": true, "become": true,
"community.crypto.openssl_privatekey": { "community.crypto.openssl_privatekey": {
"path": "{{var_tlscert_acme_netcup_ssl_directory}}/private/{{var_tlscert_acme_netcup_domain_path}}.{{var_tlscert_acme_netcup_domain_base}}.pem" "path": "{{var_tlscert_acme_netcup_ssl_directory}}/private/{{var_tlscert_acme_netcup_domain_path}}.{{var_tlscert_acme_netcup_domain_base}}.pem"
} }
}, },
{ {
"name": "csr | execute", "name": "csr",
"become": true, "become": true,
"community.crypto.openssl_csr": { "community.crypto.openssl_csr": {
"common_name": "{{var_tlscert_acme_netcup_domain_path}}.{{var_tlscert_acme_netcup_domain_base}}", "common_name": "{{var_tlscert_acme_netcup_domain_path}}.{{var_tlscert_acme_netcup_domain_base}}",

View file

@ -2,16 +2,16 @@
{ {
"name": "directories", "name": "directories",
"become": true, "become": true,
"ansible.builtin.file": {
"state": "directory",
"path": "{{item}}"
},
"loop": [ "loop": [
"{{var_tlscert_existing_ssl_directory}}/private", "{{var_tlscert_existing_ssl_directory}}/private",
"{{var_tlscert_existing_ssl_directory}}/csr", "{{var_tlscert_existing_ssl_directory}}/csr",
"{{var_tlscert_existing_ssl_directory}}/certs", "{{var_tlscert_existing_ssl_directory}}/certs",
"{{var_tlscert_existing_ssl_directory}}/fullchains" "{{var_tlscert_existing_ssl_directory}}/fullchains"
] ],
"ansible.builtin.file": {
"state": "directory",
"path": "{{item}}"
}
}, },
{ {
"name": "key", "name": "key",

View file

@ -10,35 +10,17 @@
} }
}, },
{ {
"name": "setup directories | keys", "name": "setup directories",
"become": true, "become": true,
"loop": [
"{{var_tlscert_selfsigned_ssl_directory}}/private",
"{{var_tlscert_selfsigned_ssl_directory}}/csr",
"{{var_tlscert_selfsigned_ssl_directory}}/certs",
"{{var_tlscert_selfsigned_ssl_directory}}/fullchains"
],
"ansible.builtin.file": { "ansible.builtin.file": {
"state": "directory", "state": "directory",
"path": "{{var_tlscert_selfsigned_ssl_directory}}/private" "path": "{{item}}"
}
},
{
"name": "setup directories | certs",
"become": true,
"ansible.builtin.file": {
"state": "directory",
"path": "{{var_tlscert_selfsigned_ssl_directory}}/certs"
}
},
{
"name": "setup directories | csr",
"become": true,
"ansible.builtin.file": {
"state": "directory",
"path": "{{var_tlscert_selfsigned_ssl_directory}}/csr"
}
},
{
"name": "setup directories | fullchains",
"become": true,
"ansible.builtin.file": {
"state": "directory",
"path": "{{var_tlscert_selfsigned_ssl_directory}}/fullchains"
} }
}, },
{ {