summaryrefslogtreecommitdiff
path: root/roles/x509/selfsigned
diff options
context:
space:
mode:
authorChristian Pointner <equinox@spreadspace.org>2023-08-17 00:23:01 +0200
committerChristian Pointner <equinox@spreadspace.org>2023-08-20 22:12:03 +0200
commit775492cc28346ea86396a947e1371b8aa0784380 (patch)
treee7c0dfd895adcec398e5bf6cf685c9e262a6587e /roles/x509/selfsigned
parentuacme roles almost done (diff)
revamp x509 service reloading
Diffstat (limited to 'roles/x509/selfsigned')
-rw-r--r--roles/x509/selfsigned/cert/prepare/handlers/main.yml6
-rw-r--r--roles/x509/selfsigned/cert/prepare/tasks/main.yml6
2 files changed, 9 insertions, 3 deletions
diff --git a/roles/x509/selfsigned/cert/prepare/handlers/main.yml b/roles/x509/selfsigned/cert/prepare/handlers/main.yml
new file mode 100644
index 00000000..b169d6ca
--- /dev/null
+++ b/roles/x509/selfsigned/cert/prepare/handlers/main.yml
@@ -0,0 +1,6 @@
+---
+- name: reload services for x509 certificates
+ loop: "{{ x509_certificate_reload_services | default([]) }}"
+ service:
+ name: "{{ item }}"
+ state: reloaded
diff --git a/roles/x509/selfsigned/cert/prepare/tasks/main.yml b/roles/x509/selfsigned/cert/prepare/tasks/main.yml
index 1af6ef5e..e7a47742 100644
--- a/roles/x509/selfsigned/cert/prepare/tasks/main.yml
+++ b/roles/x509/selfsigned/cert/prepare/tasks/main.yml
@@ -10,7 +10,7 @@
mode: "{{ selfsigned_cert_config.mode | default('0700') }}"
owner: "{{ selfsigned_cert_config.owner | default(omit) }}"
group: "{{ selfsigned_cert_config.group | default(omit) }}"
- notify: "{{ x509_notify_on_change | default(omit) }}"
+ notify: reload services for x509 certificates
- name: generate key for selfsigned certificate
openssl_privatekey:
@@ -20,7 +20,7 @@
group: "{{ selfsigned_cert_config.key.group | default(omit) }}"
type: "{{ selfsigned_cert_config.key.type | default(omit) }}"
size: "{{ selfsigned_cert_config.key.size | default(omit) }}"
- notify: "{{ x509_notify_on_change | default(omit) }}"
+ notify: reload services for x509 certificates
- name: generate csr for selfsigned certificate
community.crypto.openssl_csr:
@@ -59,7 +59,7 @@
selfsigned_digest: "{{ selfsigned_cert_config.cert.digest | default(omit) }}"
selfsigned_not_before: "{{ selfsigned_cert_config.cert.not_before | default(omit) }}"
selfsigned_not_after: "{{ selfsigned_cert_config.cert.not_after | default(omit) }}"
- notify: "{{ x509_notify_on_change | default(omit) }}"
+ notify: reload services for x509 certificates
- name: export paths to certificate files
set_fact: