summaryrefslogtreecommitdiff
path: root/inventory/host_vars
diff options
context:
space:
mode:
authorChristian Pointner <equinox@spreadspace.org>2023-12-20 11:53:07 +0100
committerChristian Pointner <equinox@spreadspace.org>2023-12-20 11:53:07 +0100
commitf0718f3ceceec13a03b54b8d6d0abd2dac929fc3 (patch)
treef3ce530f07496f6b35ab1f11155ce96a83abbc26 /inventory/host_vars
parentrename: x509/ownca to x509/static-ca (diff)
x509: add new role managed-ca
Diffstat (limited to 'inventory/host_vars')
-rw-r--r--inventory/host_vars/ch-testvm-prometheus.yml22
1 files changed, 21 insertions, 1 deletions
diff --git a/inventory/host_vars/ch-testvm-prometheus.yml b/inventory/host_vars/ch-testvm-prometheus.yml
index 50e625fa..de31921f 100644
--- a/inventory/host_vars/ch-testvm-prometheus.yml
+++ b/inventory/host_vars/ch-testvm-prometheus.yml
@@ -38,6 +38,23 @@ ntp_variant: systemd-timesyncd
###
+managed_ca_authorities:
+ foo:
+ key:
+ type: RSA
+ size: 4096
+ cert:
+ common_name: foo CA
+ country_name: "AT"
+ locality_name: "Graz"
+ organization_name: "spreadspace"
+ organizational_unit_name: "ansible"
+ state_or_province_name: "Styria"
+ digest: sha256
+ not_before: +0h
+ not_after: +520w
+
+
mosquitto_global_config_options:
per_listener_settings: "true"
@@ -47,8 +64,11 @@ mosquitto_listeners:
hostnames:
- mqtt.example.com
tls:
- certificate_provider: selfsigned
+ certificate_provider: managed-ca
certificate_config:
+ ca:
+ host: ch-testvm-prometheus
+ name: foo
cert:
organization_name: "spreadspace"
organizational_unit_name: "ansible"