--- - name: "Make sure epoptes certificates directory is present for {{ epoptesgroup }}" local_action: module: file mode: 0755 state: directory path: "/var/lib/nethserver/secrets/epoptes/{{ epoptesgroup }}" - name: "Make sure epoptes certificates directory is present" local_action: module: file mode: 0755 state: directory path: "/var/lib/nethserver/secrets/epoptes" - name: Generate a Self Signed OpenSSL certificate key local_action: module: openssl_privatekey path: "/var/lib/nethserver/secrets/epoptes/{{ epoptesgroup }}/server.key" size: 4096 - name: Generate a Self Signed OpenSSL certificate sign request local_action: module: openssl_csr path: "/var/lib/nethserver/secrets/epoptes/{{ epoptesgroup }}/server.csr" privatekey_path: "/var/lib/nethserver/secrets/epoptes/{{ epoptesgroup }}/server.key" - name: Generate a Self Signed OpenSSL certificate local_action: module: openssl_certificate path: "/var/lib/nethserver/secrets/epoptes/{{ epoptesgroup }}/server.crt" privatekey_path: "/var/lib/nethserver/secrets/epoptes/{{ epoptesgroup }}/server.key" csr_path: "/var/lib/nethserver/secrets/epoptes/{{ epoptesgroup }}/server.csr" provider: selfsigned # 10 years from now, this is the default selfsigned_not_after: "+3650d" # valid since the Epoch, because sometimes CMOS battery fails selfsigned_not_before: "19700101000100Z"