vps-ansible/roles/rt/tasks/ssl-dev.yml

28 lines
862 B
YAML

---
- name: Ensure python OpenSSL dependencies are installed.
pip:
name: pyOpenSSL
state: present
- name: Ensure directory exists for local self-signed TLS certs.
file:
path: /etc/letsencrypt/live/{{ rt_domain }}
state: directory
- name: Generate an OpenSSL private key.
openssl_privatekey:
path: /etc/letsencrypt/live/{{ rt_domain }}/privkey.pem
- name: Generate an OpenSSL CSR.
openssl_csr:
path: /etc/ssl/private/{{ rt_domain }}.csr
privatekey_path: /etc/letsencrypt/live/{{ rt_domain }}/privkey.pem
common_name: "{{ rt_domain }}"
- name: Generate a Self Signed OpenSSL certificate.
openssl_certificate:
path: /etc/letsencrypt/live/{{ rt_domain }}/fullchain.pem
privatekey_path: /etc/letsencrypt/live/{{ rt_domain }}/privkey.pem
csr_path: /etc/ssl/private/{{ rt_domain }}.csr
provider: selfsigned