summaryrefslogtreecommitdiff
path: root/roles/nginx/auth/whawty-sso/login/tasks/main.yml
diff options
context:
space:
mode:
Diffstat (limited to 'roles/nginx/auth/whawty-sso/login/tasks/main.yml')
-rw-r--r--roles/nginx/auth/whawty-sso/login/tasks/main.yml12
1 files changed, 12 insertions, 0 deletions
diff --git a/roles/nginx/auth/whawty-sso/login/tasks/main.yml b/roles/nginx/auth/whawty-sso/login/tasks/main.yml
index 342c8521..e2267238 100644
--- a/roles/nginx/auth/whawty-sso/login/tasks/main.yml
+++ b/roles/nginx/auth/whawty-sso/login/tasks/main.yml
@@ -16,6 +16,15 @@
dest: "/etc/nginx/auth/whawty-sso/{{ item.key }}.htpasswd"
mode: 0400
+- name: make sure store backend directories exist
+ loop: "{{ whawty_nginx_sso_logins | dict2items | selectattr('value.config.cookie.backend.bolt', 'defined') }}"
+ loop_control:
+ label: "{{ item.key }}"
+ file:
+ path: "{{ item.value.config.cookie.backend.bolt.path | default('/var/lib/whawty/nginx-sso/'~item.key~'.bolt') | dirname }}"
+ state: directory
+ mode: 0700
+
- name: generate configuration file
loop: "{{ whawty_nginx_sso_logins | dict2items }}"
@@ -28,6 +37,9 @@
{% if 'static' in ssoconf.auth and 'htpasswd' not in ssoconf.auth.static %}
{% set _dummy = ssoconf.auth.static.update({'htpasswd': '/etc/nginx/auth/whawty-sso/'~item.key~'.htpasswd'}) %}
{% endif %}
+ {% if 'bolt' in ssoconf.cookie.backend and 'path' not in ssoconf.cookie.backend.bolt %}
+ {% set _dummy = ssoconf.cookie.backend.bolt.update({'path': '/var/lib/whawty/nginx-sso/'~item.key~'.bolt'}) %}
+ {% endif %}
{{ ssoconf | to_nice_yaml(indent=2) }}
dest: "/etc/nginx/auth/whawty-sso/{{ item.key }}.yml"
mode: 0400