72 lines
1.6 KiB
JSON
72 lines
1.6 KiB
JSON
[
|
|
{
|
|
"name": "show vars",
|
|
"when": "switch_show_vars",
|
|
"ansible.builtin.debug": {
|
|
"var": "vars.cfg_tlscert_selfsigned"
|
|
}
|
|
},
|
|
{
|
|
"name": "install packages",
|
|
"become": true,
|
|
"ansible.builtin.apt": {
|
|
"update_cache": true,
|
|
"pkg": [
|
|
"openssl",
|
|
"python3-cryptography"
|
|
]
|
|
}
|
|
},
|
|
{
|
|
"name": "setup directories",
|
|
"become": true,
|
|
"loop": [
|
|
"/etc/ssl/private",
|
|
"/etc/ssl/csr",
|
|
"/etc/ssl/certs",
|
|
"/etc/ssl/fullchains"
|
|
],
|
|
"ansible.builtin.file": {
|
|
"state": "directory",
|
|
"path": "{{item}}"
|
|
}
|
|
},
|
|
{
|
|
"name": "csr | generate private key",
|
|
"become": true,
|
|
"community.crypto.openssl_privatekey": {
|
|
"path": "/etc/ssl/private/{{cfg_tlscert_selfsigned.domain}}.pem"
|
|
}
|
|
},
|
|
{
|
|
"name": "csr | execute",
|
|
"become": true,
|
|
"community.crypto.openssl_csr": {
|
|
"privatekey_path": "/etc/ssl/private/{{cfg_tlscert_selfsigned.domain}}.pem",
|
|
"common_name": "{{cfg_tlscert_selfsigned.domain}}",
|
|
"subject_alt_name": [
|
|
"DNS:{{cfg_tlscert_selfsigned.domain}}"
|
|
],
|
|
"path": "/etc/ssl/csr/{{cfg_tlscert_selfsigned.domain}}.pem"
|
|
},
|
|
"register": "temp_csr"
|
|
},
|
|
{
|
|
"name": "generate certificate",
|
|
"become": true,
|
|
"community.crypto.x509_certificate": {
|
|
"privatekey_path": "/etc/ssl/private/{{cfg_tlscert_selfsigned.domain}}.pem",
|
|
"csr_path": "/etc/ssl/csr/{{cfg_tlscert_selfsigned.domain}}.pem",
|
|
"provider": "selfsigned",
|
|
"path": "/etc/ssl/certs/{{cfg_tlscert_selfsigned.domain}}.pem"
|
|
}
|
|
},
|
|
{
|
|
"name": "compose fullchain",
|
|
"become": true,
|
|
"ansible.builtin.shell": {
|
|
"cmd": "cat /etc/ssl/certs/{{cfg_tlscert_selfsigned.domain}}.pem > /etc/ssl/fullchains/{{cfg_tlscert_selfsigned.domain}}.pem"
|
|
}
|
|
}
|
|
]
|