40 lines
1.5 KiB
YAML
40 lines
1.5 KiB
YAML
|
---
|
||
|
|
||
|
- name: "Make sure epoptes certificates directory is present for {{ epoptesgroup }}"
|
||
|
local_action:
|
||
|
module: file
|
||
|
mode: 0755
|
||
|
state: directory
|
||
|
path: "/var/lib/nethserver/secrets/epoptes/{{ epoptesgroup }}"
|
||
|
|
||
|
- name: "Make sure epoptes certificates directory is present"
|
||
|
local_action:
|
||
|
module: file
|
||
|
mode: 0755
|
||
|
state: directory
|
||
|
path: "/var/lib/nethserver/secrets/epoptes"
|
||
|
|
||
|
- name: Generate a Self Signed OpenSSL certificate key
|
||
|
local_action:
|
||
|
module: openssl_privatekey
|
||
|
path: "/var/lib/nethserver/secrets/epoptes/{{ epoptesgroup }}/server.key"
|
||
|
size: 4096
|
||
|
|
||
|
- name: Generate a Self Signed OpenSSL certificate sign request
|
||
|
local_action:
|
||
|
module: openssl_csr
|
||
|
path: "/var/lib/nethserver/secrets/epoptes/{{ epoptesgroup }}/server.csr"
|
||
|
privatekey_path: "/var/lib/nethserver/secrets/epoptes/{{ epoptesgroup }}/server.key"
|
||
|
|
||
|
- name: Generate a Self Signed OpenSSL certificate
|
||
|
local_action:
|
||
|
module: openssl_certificate
|
||
|
path: "/var/lib/nethserver/secrets/epoptes/{{ epoptesgroup }}/server.crt"
|
||
|
privatekey_path: "/var/lib/nethserver/secrets/epoptes/{{ epoptesgroup }}/server.key"
|
||
|
csr_path: "/var/lib/nethserver/secrets/epoptes/{{ epoptesgroup }}/server.csr"
|
||
|
provider: selfsigned
|
||
|
# 10 years from now, this is the default
|
||
|
selfsigned_not_after: "+3650d"
|
||
|
# valid since the Epoch, because sometimes CMOS battery fails
|
||
|
selfsigned_not_before: "19700101000100Z"
|