1
0
mirror of https://github.com/geerlingguy/ansible-for-devops.git synced 2024-05-19 06:50:03 +00:00
Files
geerlingguy-ansible-for-devops/https-nginx-proxy/provisioning/tasks/self-signed-cert.yml
2019-08-16 11:05:01 -05:00

23 lines
829 B
YAML

---
- name: Ensure directory exists for local self-signed TLS certs.
file:
path: "{{ certificate_dir }}/{{ server_hostname }}"
state: directory
- name: Generate an OpenSSL private key.
openssl_privatekey:
path: "{{ certificate_dir }}/{{ server_hostname }}/privkey.pem"
- name: Generate an OpenSSL CSR.
openssl_csr:
path: "{{ certificate_dir }}/{{ server_hostname }}.csr"
privatekey_path: "{{ certificate_dir }}/{{ server_hostname }}/privkey.pem"
common_name: "{{ server_hostname }}"
- name: Generate a Self Signed OpenSSL certificate.
openssl_certificate:
path: "{{ certificate_dir }}/{{ server_hostname }}/fullchain.pem"
privatekey_path: "{{ certificate_dir }}/{{ server_hostname }}/privkey.pem"
csr_path: "{{ certificate_dir }}/{{ server_hostname }}.csr"
provider: selfsigned