diff options
Diffstat (limited to 'roles/apps/coturn/tasks/main.yml')
| -rw-r--r-- | roles/apps/coturn/tasks/main.yml | 20 |
1 files changed, 17 insertions, 3 deletions
diff --git a/roles/apps/coturn/tasks/main.yml b/roles/apps/coturn/tasks/main.yml index 29a87d6f..132e4847 100644 --- a/roles/apps/coturn/tasks/main.yml +++ b/roles/apps/coturn/tasks/main.yml @@ -27,16 +27,17 @@ file: path: "{{ coturn_base_path }}/{{ coturn_realm }}/config/ssl" state: directory - owner: coturn + owner: root group: coturn - mode: 0700 + mode: 0750 - name: generate Diffie-Hellman parameters openssl_dhparam: path: "{{ coturn_base_path }}/{{ coturn_realm }}/config/ssl/dhparams.pem" size: "{{ coturn_dhparam_size }}" - owner: coturn + owner: root group: coturn + mode: 0644 - name: install acmetool hook script template: @@ -44,6 +45,19 @@ dest: "/etc/acme/hooks/coturn-{{ coturn_realm }}" mode: 0755 +- name: install acmetool systemd unit snippet + copy: + dest: "/etc/systemd/system/acmetool.service.d/coturn-{{ coturn_realm }}.conf" + content: | + [Service] + ReadWritePaths={{ coturn_base_path }}/{{ coturn_realm }}/config/ssl + register: coturn_acmetool_snippet + +- name: reload systemd + when: coturn_acmetool_snippet is changed + systemd: + daemon_reload: yes + - name: configure nginx vhost vars: nginx_vhost: |