summaryrefslogtreecommitdiff
path: root/roles/x509/uacme
diff options
context:
space:
mode:
Diffstat (limited to 'roles/x509/uacme')
-rw-r--r--roles/x509/uacme/cert/prepare/tasks/main.yml1
-rw-r--r--roles/x509/uacme/cert/prepare/templates/updated.sh.j25
2 files changed, 5 insertions, 1 deletions
diff --git a/roles/x509/uacme/cert/prepare/tasks/main.yml b/roles/x509/uacme/cert/prepare/tasks/main.yml
index 887f7355..d968db84 100644
--- a/roles/x509/uacme/cert/prepare/tasks/main.yml
+++ b/roles/x509/uacme/cert/prepare/tasks/main.yml
@@ -94,6 +94,7 @@
x509_certificate_path_cert: "/var/lib/uacme.d/{{ uacme_cert_name }}/crt.pem"
x509_certificate_path_chain: "/var/lib/uacme.d/{{ uacme_cert_name }}/chain.pem"
x509_certificate_path_fullchain: "/var/lib/uacme.d/{{ uacme_cert_name }}/{{ uacme_cert_name }}-cert.pem"
+ x509_certificate_path_ca_cert: ""
- name: install script to be called when new certificate is generated
template:
diff --git a/roles/x509/uacme/cert/prepare/templates/updated.sh.j2 b/roles/x509/uacme/cert/prepare/templates/updated.sh.j2
index b6bd20de..78850cfb 100644
--- a/roles/x509/uacme/cert/prepare/templates/updated.sh.j2
+++ b/roles/x509/uacme/cert/prepare/templates/updated.sh.j2
@@ -17,7 +17,10 @@ chgrp "{{ uacme_cert_config.cert.group }}" $BASE_D/{{ uacme_cert_name }}-cert.pe
install{% if 'mode' in file %} -m {{ file.mode }}{% endif %}{% if 'owner' in file %} -o {{ file.owner }}{% endif %}{% if 'group' in file %} -g {{ file.group }}{% endif %} /dev/null "{{ file.dest }}.new"
{% for src in file.src %}
-cat "{{ hostvars[inventory_hostname]['x509_certificate_path_' + src] }}" >> "{{ file.dest }}.new"
+{% set src_file = lookup('vars', 'x509_certificate_path_' + src) %}
+{% if src_file != "" %}
+cat "{{ src_file }}" >> "{{ file.dest }}.new"
+{% endif %}
{% endfor %}
mv "{{ file.dest }}.new" "{{ file.dest }}"
{% endfor %}