mirror of
https://github.com/geerlingguy/ansible-for-devops.git
synced 2024-05-19 06:50:03 +00:00
Jeff Geerling
23 lines
829 B
YAML
23 lines
829 B
YAML
---
|
|
- name: Ensure directory exists for local self-signed TLS certs.
|
|
file:
|
|
path: "{{ certificate_dir }}/{{ server_hostname }}"
|
|
state: directory
|
|
|
|
- name: Generate an OpenSSL private key.
|
|
openssl_privatekey:
|
|
path: "{{ certificate_dir }}/{{ server_hostname }}/privkey.pem"
|
|
|
|
- name: Generate an OpenSSL CSR.
|
|
openssl_csr:
|
|
path: "{{ certificate_dir }}/{{ server_hostname }}.csr"
|
|
privatekey_path: "{{ certificate_dir }}/{{ server_hostname }}/privkey.pem"
|
|
common_name: "{{ server_hostname }}"
|
|
|
|
- name: Generate a Self Signed OpenSSL certificate.
|
|
openssl_certificate:
|
|
path: "{{ certificate_dir }}/{{ server_hostname }}/fullchain.pem"
|
|
privatekey_path: "{{ certificate_dir }}/{{ server_hostname }}/privkey.pem"
|
|
csr_path: "{{ certificate_dir }}/{{ server_hostname }}.csr"
|
|
provider: selfsigned
|