roles/x509/static/cert/prepare/defaults/main.yml


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35

---
static_cert_hostnames: "{{ x509_certificate_hostnames }}"
static_cert_name: "{{ x509_certificate_name | default(static_cert_hostnames[0]) }}"

static_cert_base_dir: "/etc/ssl"

# static_cert_config:
#   path: "{{ static_cert_base_dir }}/{{ static_cert_name }}"
#   mode: "0750"
#   owner: root
#   group: www-data
#   key:
#     mode: "0640"
#     owner: root
#     group: www-data
#     content: |
#       -----BEGIN RSA PRIVATE KEY-----
#       ...
#       -----END RSA PRIVATE KEY-----
#   cert:
#     mode: "0644"
#     owner: root
#     group: www-data
#     content: |
#       -----BEGIN CERTIFICATE-----
#       ...
#       -----END CERTIFICATE-----
#   chain:
#     mode: "0644"
#     owner: root
#     group: www-data
#     content: |
#       -----BEGIN CERTIFICATE-----
#       ...
#       -----END CERTIFICATE-----