diff --git a/https-self-signed/README.md b/https-self-signed/README.md index 922add8..13ea9a1 100644 --- a/https-self-signed/README.md +++ b/https-self-signed/README.md @@ -1,4 +1,4 @@ -# HTTPS Demonstration VM +# HTTPS Self-Signed Certificate Demo VM This project spins up a VM and demonstrates generating self-signed certificates locally, or Let's Encrypt certificates on a public server. diff --git a/https-self-signed/provisioning/main.yml b/https-self-signed/provisioning/main.yml index 85d8490..025bc71 100644 --- a/https-self-signed/provisioning/main.yml +++ b/https-self-signed/provisioning/main.yml @@ -1,27 +1,8 @@ --- - hosts: all - vars: - # Firewall settings. - firewall_allowed_tcp_ports: - - "22" - - "80" - - "443" - - # Python settings. - pip_package: python3-pip - pip_install_packages: ['pyopenssl'] - - # Nginx settings. - nginx_vhosts: [] - nginx_remove_default_vhost: True - nginx_ppa_use: True - nginx_ppa_version: stable - nginx_docroot: /var/www/html - - # Self-signed certificate settings. - certificate_dir: /etc/letsencrypt/live - server_hostname: https.test + vars_files: + - vars/main.yml pre_tasks: - name: Ensure apt cache is updated. diff --git a/https-self-signed/provisioning/vars/main.yml b/https-self-signed/provisioning/vars/main.yml new file mode 100644 index 0000000..e1f1920 --- /dev/null +++ b/https-self-signed/provisioning/vars/main.yml @@ -0,0 +1,21 @@ +--- +# Firewall settings. +firewall_allowed_tcp_ports: + - "22" + - "80" + - "443" + +# Python settings. +pip_package: python3-pip +pip_install_packages: ['pyopenssl'] + +# Nginx settings. +nginx_vhosts: [] +nginx_remove_default_vhost: True +nginx_ppa_use: True +nginx_ppa_version: stable +nginx_docroot: /var/www/html + +# Self-signed certificate settings. +certificate_dir: /etc/letsencrypt/live +server_hostname: https.test \ No newline at end of file