From 4b9d4a0810d79be50fb1e550dcc38c44f527bc96 Mon Sep 17 00:00:00 2001 From: Christian Pointner Date: Fri, 22 Sep 2023 20:13:19 +0200 Subject: x509/(selfsigned|ownca): add support for custom post-renewal scripts --- roles/x509/ownca/cert/prepare/templates/updated.sh.j2 | 15 +++++++++++++++ 1 file changed, 15 insertions(+) create mode 100644 roles/x509/ownca/cert/prepare/templates/updated.sh.j2 (limited to 'roles/x509/ownca/cert/prepare/templates') diff --git a/roles/x509/ownca/cert/prepare/templates/updated.sh.j2 b/roles/x509/ownca/cert/prepare/templates/updated.sh.j2 new file mode 100644 index 00000000..15f68cd9 --- /dev/null +++ b/roles/x509/ownca/cert/prepare/templates/updated.sh.j2 @@ -0,0 +1,15 @@ +#!/bin/sh +{% if 'install' in x509_certificate_renewal %} +{% for file in x509_certificate_renewal.install %} + +install{% if 'mode' in file %} -m {{ file.mode }}{% endif %}{% if 'owner' in file %} -o {{ file.owner }}{% endif %}{% if 'owner' in file %} -g {{ file.group }}{% endif %} /dev/null "{{ file.dest }}.new" +{% for src in file.src %} +cat "{{ lookup('vars', 'x509_certificate_path_' + src) }}" >> "{{ file.dest }}.new" +mv "{{ file.dest }}.new" "{{ file.dest }}" +{% endfor %} +{% endfor %} +{% endif %} +{% if 'reload' in x509_certificate_renewal %} + +{{ x509_certificate_renewal.reload | trim }} +{% endif %} -- cgit v1.2.3