misc/ansible-base
0
0
Fork 0
Code Issues Pull requests 1 Projects Releases Packages Wiki Activity Actions

Merge branch 'main' of dl-cloud-gitlab:roydfalk/ansible-base

Browse source
This commit is contained in:
roydfalk 2024-06-27 19:08:37 +02:00
commit 8e71c7eadc
4 changed files with 24 additions and 28 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
roles/tlscert_existing/defaults/main.json
View file

@ -1,8 +1,6 @@
{ {
"var_tlscert_existing_domain": "foo.example.org",
"var_tlscert_existing_key_path": "/tmp/key.pem", "var_tlscert_existing_key_path": "/tmp/key.pem",
"var_tlscert_existing_cert_path": "/tmp/cert.pem", "var_tlscert_existing_cert_path": "/tmp/cert.pem",
"var_tlscert_existing_fullchain_path": "/tmp/fullchain.pem", "var_tlscert_existing_fullchain_path": "/tmp/fullchain.pem"
"var_tlscert_existing_domain_base": "example.org",
"var_tlscert_existing_domain_path": "foo",
"var_tlscert_existing_ssl_directory": "/etc/ssl"
} }

16
roles/tlscert_existing/tasks/main.json
View file

@ -3,10 +3,10 @@
"name": "directories", "name": "directories",
"become": true, "become": true,
"loop": [ "loop": [
"{{var_tlscert_existing_ssl_directory}}/private", "/etc/ssl/private",
"{{var_tlscert_existing_ssl_directory}}/csr", "/etc/ssl/csr",
"{{var_tlscert_existing_ssl_directory}}/certs", "/etc/ssl/certs",
"{{var_tlscert_existing_ssl_directory}}/fullchains" "/etc/ssl/fullchains"
], ],
"ansible.builtin.file": { "ansible.builtin.file": {
"state": "directory", "state": "directory",
@ -18,7 +18,7 @@
"become": true, "become": true,
"ansible.builtin.copy": { "ansible.builtin.copy": {
"src": "{{var_tlscert_existing_key_path}}", "src": "{{var_tlscert_existing_key_path}}",
"dest": "{{var_tlscert_existing_ssl_directory}}/private/{{var_tlscert_existing_domain_path}}.{{var_tlscert_existing_domain_base}}.pem" "dest": "/etc/ssl/private/{{var_tlscert_existing_domain}}.pem"
} }
}, },
{ {
@ -26,7 +26,7 @@
"become": true, "become": true,
"ansible.builtin.copy": { "ansible.builtin.copy": {
"src": "{{var_tlscert_existing_cert_path}}", "src": "{{var_tlscert_existing_cert_path}}",
"dest": "{{var_tlscert_existing_ssl_directory}}/certs/{{var_tlscert_existing_domain_path}}.{{var_tlscert_existing_domain_base}}.pem" "dest": "/etc/ssl/certs/{{var_tlscert_existing_domain}}.pem"
} }
}, },
{ {
@ -35,7 +35,7 @@
"become": true, "become": true,
"ansible.builtin.copy": { "ansible.builtin.copy": {
"src": "{{var_tlscert_existing_fullchain_path}}", "src": "{{var_tlscert_existing_fullchain_path}}",
"dest": "{{var_tlscert_existing_ssl_directory}}/fullchains/{{var_tlscert_existing_domain_path}}.{{var_tlscert_existing_domain_base}}.pem" "dest": "/etc/ssl/fullchains/{{var_tlscert_existing_domain}}.pem"
} }
}, },
{ {
@ -43,7 +43,7 @@
"when": "var_tlscert_existing_fullchain_path == None", "when": "var_tlscert_existing_fullchain_path == None",
"become": true, "become": true,
"ansible.builtin.shell": { "ansible.builtin.shell": {
"cmd": "cat {{var_tlscert_existing_ssl_directory}}/certs/{{var_tlscert_existing_domain_path}}.{{var_tlscert_existing_domain_base}}.pem > {{var_tlscert_existing_ssl_directory}}/fullchains/{{var_tlscert_existing_domain_path}}.{{var_tlscert_existing_domain_base}}.pem" "cmd": "cat /etc/ssl/certs/{{var_tlscert_existing_domain}}.pem > /etc/ssl/fullchains/{{var_tlscert_existing_domain}}.pem"
} }
} }
] ]

4
roles/tlscert_selfsigned/defaults/main.json
View file

@ -1,5 +1,3 @@
{ {
"var_tlscert_selfsigned_domain_base": "example.org", "var_tlscert_selfsigned_domain": "foo.example.org"
"var_tlscert_selfsigned_domain_path": "foo",
"var_tlscert_selfsigned_ssl_directory": "/etc/ssl"
} }

26
roles/tlscert_selfsigned/tasks/main.json
View file

@ -14,10 +14,10 @@
"name": "setup directories", "name": "setup directories",
"become": true, "become": true,
"loop": [ "loop": [
"{{var_tlscert_selfsigned_ssl_directory}}/private", "/etc/ssl/private",
"{{var_tlscert_selfsigned_ssl_directory}}/csr", "/etc/ssl/csr",
"{{var_tlscert_selfsigned_ssl_directory}}/certs", "/etc/ssl/certs",
"{{var_tlscert_selfsigned_ssl_directory}}/fullchains" "/etc/ssl/fullchains"
], ],
"ansible.builtin.file": { "ansible.builtin.file": {
"state": "directory", "state": "directory",
@ -28,19 +28,19 @@
"name": "csr | generate private key", "name": "csr | generate private key",
"become": true, "become": true,
"community.crypto.openssl_privatekey": { "community.crypto.openssl_privatekey": {
"path": "{{var_tlscert_selfsigned_ssl_directory}}/private/{{var_tlscert_selfsigned_domain_path}}.{{var_tlscert_selfsigned_domain_base}}.pem" "path": "/etc/ssl/private/{{var_tlscert_selfsigned_domain}}.pem"
} }
}, },
{ {
"name": "csr | execute", "name": "csr | execute",
"become": true, "become": true,
"community.crypto.openssl_csr": { "community.crypto.openssl_csr": {
"privatekey_path": "{{var_tlscert_selfsigned_ssl_directory}}/private/{{var_tlscert_selfsigned_domain_path}}.{{var_tlscert_selfsigned_domain_base}}.pem", "privatekey_path": "/etc/ssl/private/{{var_tlscert_selfsigned_domain}}.pem",
"common_name": "{{var_tlscert_selfsigned_domain_path}}.{{var_tlscert_selfsigned_domain_base}}", "common_name": "{{var_tlscert_selfsigned_domain}}",
"subject_alt_name": [ "subject_alt_name": [
"DNS:{{var_tlscert_selfsigned_domain_path}}.{{var_tlscert_selfsigned_domain_base}}" "DNS:{{var_tlscert_selfsigned_domain}}"
], ],
"path": "{{var_tlscert_selfsigned_ssl_directory}}/csr/{{var_tlscert_selfsigned_domain_path}}.{{var_tlscert_selfsigned_domain_base}}.pem" "path": "/etc/ssl/csr/{{var_tlscert_selfsigned_domain}}.pem"
}, },
"register": "temp_csr" "register": "temp_csr"
}, },
@ -48,17 +48,17 @@
"name": "generate certificate", "name": "generate certificate",
"become": true, "become": true,
"community.crypto.x509_certificate": { "community.crypto.x509_certificate": {
"privatekey_path": "{{var_tlscert_selfsigned_ssl_directory}}/private/{{var_tlscert_selfsigned_domain_path}}.{{var_tlscert_selfsigned_domain_base}}.pem", "privatekey_path": "/etc/ssl/private/{{var_tlscert_selfsigned_domain}}.pem",
"csr_path": "{{var_tlscert_selfsigned_ssl_directory}}/csr/{{var_tlscert_selfsigned_domain_path}}.{{var_tlscert_selfsigned_domain_base}}.pem", "csr_path": "/etc/ssl/csr/{{var_tlscert_selfsigned_domain}}.pem",
"provider": "selfsigned", "provider": "selfsigned",
"path": "{{var_tlscert_selfsigned_ssl_directory}}/certs/{{var_tlscert_selfsigned_domain_path}}.{{var_tlscert_selfsigned_domain_base}}.pem" "path": "/etc/ssl/certs/{{var_tlscert_selfsigned_domain}}.pem"
} }
}, },
{ {
"name": "compose fullchain", "name": "compose fullchain",
"become": true, "become": true,
"ansible.builtin.shell": { "ansible.builtin.shell": {
"cmd": "cat {{var_tlscert_selfsigned_ssl_directory}}/certs/{{var_tlscert_selfsigned_domain_path}}.{{var_tlscert_selfsigned_domain_base}}.pem > {{var_tlscert_selfsigned_ssl_directory}}/fullchains/{{var_tlscert_selfsigned_domain_path}}.{{var_tlscert_selfsigned_domain_base}}.pem" "cmd": "cat /etc/ssl/certs/{{var_tlscert_selfsigned_domain}}.pem > /etc/ssl/fullchains/{{var_tlscert_selfsigned_domain}}.pem"
} }
} }
] ]