40 lines
1.5 KiB
YAML
40 lines
1.5 KiB
YAML
---
|
|
|
|
- name: "Make sure epoptes certificates directory is present for {{ epoptesgroup }}"
|
|
local_action:
|
|
module: file
|
|
mode: 0755
|
|
state: directory
|
|
path: "/var/lib/nethserver/secrets/epoptes/{{ epoptesgroup }}"
|
|
|
|
- name: "Make sure epoptes certificates directory is present"
|
|
local_action:
|
|
module: file
|
|
mode: 0755
|
|
state: directory
|
|
path: "/var/lib/nethserver/secrets/epoptes"
|
|
|
|
- name: Generate a Self Signed OpenSSL certificate key
|
|
local_action:
|
|
module: openssl_privatekey
|
|
path: "/var/lib/nethserver/secrets/epoptes/{{ epoptesgroup }}/server.key"
|
|
size: 4096
|
|
|
|
- name: Generate a Self Signed OpenSSL certificate sign request
|
|
local_action:
|
|
module: openssl_csr
|
|
path: "/var/lib/nethserver/secrets/epoptes/{{ epoptesgroup }}/server.csr"
|
|
privatekey_path: "/var/lib/nethserver/secrets/epoptes/{{ epoptesgroup }}/server.key"
|
|
|
|
- name: Generate a Self Signed OpenSSL certificate
|
|
local_action:
|
|
module: openssl_certificate
|
|
path: "/var/lib/nethserver/secrets/epoptes/{{ epoptesgroup }}/server.crt"
|
|
privatekey_path: "/var/lib/nethserver/secrets/epoptes/{{ epoptesgroup }}/server.key"
|
|
csr_path: "/var/lib/nethserver/secrets/epoptes/{{ epoptesgroup }}/server.csr"
|
|
provider: selfsigned
|
|
# 10 years from now, this is the default
|
|
selfsigned_not_after: "+3650d"
|
|
# valid since the Epoch, because sometimes CMOS battery fails
|
|
selfsigned_not_before: "19700101000100Z"
|