summaryrefslogtreecommitdiff
path: root/roles/nginx
diff options
context:
space:
mode:
authorChristian Pointner <equinox@spreadspace.org>2023-09-12 00:41:07 +0200
committerChristian Pointner <equinox@spreadspace.org>2023-09-12 00:41:07 +0200
commit33890cacb183b69bf0032fd3dbd41b9c20cab4b1 (patch)
treef5d042cb37c9a72f4ba003d2a8efbaa31aa7b4a3 /roles/nginx
parentmonitoring/grafana: add automatic handling for admin password and additonal u... (diff)
x509/certificates: generic config handling
Diffstat (limited to 'roles/nginx')
-rw-r--r--roles/nginx/vhost/defaults/main.yml4
-rw-r--r--roles/nginx/vhost/tasks/main.yml2
2 files changed, 6 insertions, 0 deletions
diff --git a/roles/nginx/vhost/defaults/main.yml b/roles/nginx/vhost/defaults/main.yml
index 0eb67b42..834e1e10 100644
--- a/roles/nginx/vhost/defaults/main.yml
+++ b/roles/nginx/vhost/defaults/main.yml
@@ -34,6 +34,10 @@
# variant: legacy
# hsts: false
# certificate_provider: acmetool
+# certificate_config:
+# request:
+# challenge:
+# http-self-test: false
# hostnames:
# - static.example.com
# extra_directives: |-
diff --git a/roles/nginx/vhost/tasks/main.yml b/roles/nginx/vhost/tasks/main.yml
index 2c1f0f29..5468bcc6 100644
--- a/roles/nginx/vhost/tasks/main.yml
+++ b/roles/nginx/vhost/tasks/main.yml
@@ -4,6 +4,7 @@
vars:
x509_certificate_name: "{{ nginx_vhost.name }}"
x509_certificate_hostnames: "{{ nginx_vhost.hostnames }}"
+ x509_certificate_config: "{{ nginx_vhost.tls.certificate_config | default({}) }}"
x509_certificate_reload_services:
- nginx
include_role:
@@ -43,6 +44,7 @@
vars:
x509_certificate_name: "{{ nginx_vhost.name }}"
x509_certificate_hostnames: "{{ nginx_vhost.hostnames }}"
+ x509_certificate_config: "{{ nginx_vhost.tls.certificate_config | default({}) }}"
x509_certificate_reload_services:
- nginx
include_role: