2martens
5e9393a4b9
- removed default variables with unusable values - exchanged ansible_domain with collabora_domain where applicable
36 lines
1.1 KiB
YAML
36 lines
1.1 KiB
YAML
---
|
|
- name: Ensure python OpenSSL dependencies are installed.
|
|
pip:
|
|
name: pyOpenSSL
|
|
state: present
|
|
|
|
- name: Copy LetsEncrypt Apache config
|
|
template:
|
|
src: etc/letsencrypt/options-ssl-apache.conf.j2
|
|
dest: /etc/letsencrypt/options-ssl-apache.conf
|
|
owner: root
|
|
group: root
|
|
mode: 0644
|
|
|
|
- name: Ensure directory exists for local self-signed TLS certs.
|
|
file:
|
|
path: /etc/letsencrypt/live/{{ collabora_domain }}
|
|
state: directory
|
|
|
|
- name: Generate an OpenSSL private key.
|
|
openssl_privatekey:
|
|
path: /etc/letsencrypt/live/{{ collabora_domain }}/privkey.pem
|
|
|
|
- name: Generate an OpenSSL CSR.
|
|
openssl_csr:
|
|
path: /etc/ssl/private/{{ collabora_domain }}.csr
|
|
privatekey_path: /etc/letsencrypt/live/{{ collabora_domain }}/privkey.pem
|
|
common_name: "{{ collabora_domain }}"
|
|
|
|
- name: Generate a Self Signed OpenSSL certificate.
|
|
openssl_certificate:
|
|
path: /etc/letsencrypt/live/{{ collabora_domain }}/fullchain.pem
|
|
privatekey_path: /etc/letsencrypt/live/{{ collabora_domain }}/privkey.pem
|
|
csr_path: /etc/ssl/private/{{ collabora_domain }}.csr
|
|
provider: selfsigned
|