Manage a SSL certificate on a server
ansible-galaxy install outsideopen.ssl_certificate
---
- hosts: webserver
roles:
- role: outsideopen.ssl_certificate
# the certs should be located in files/certs/example_com/
# named as server.crt, ca.crt and server.key
ssl_certificate_name: example_com| Variable | Choices/Defaults | Comments |
|---|---|---|
| ssl_certificate_source_path | certs | path under files to search for certificates |
| ssl_certificate_path | /etc/ssl/private | Where to store the certificates |
| ssl_certificate_path_cert | {ssl_certificate_path}/{ssl_certificate_name} |
Full certificate path |
| ssl_certificate_path_owner | root | User to own the path |
| ssl_certificate_path_group | root | Group to own the path |
| ssl_certificate_path_mode | 0700 | Path mode |
| ssl_certificate_owner | root | User to own the cert |
| ssl_certificate_group | root | Group to own the cert |
| ssl_certificate_mode | 0440 | Cert mode |
| ssl_certificate_files | List of files to copy |
This is an array of dictionaries, that define the local file and the destination file
ssl_certificate_files_default:
- file: server.crt
dest: "{{ ssl_certificate_name }}.crt"
- file: ca.crt
dest: "{{ ssl_certificate_name }}-ca.crt"
- file: server.key
dest: "{{ ssl_certificate_name }}.key"If you want to copy over a specific file (ie - server.pfx) you would add
ssl_certificate_files_extra:
- file: server.pfx
dest: "{{ ssl_certificate_name }}.pfx"Testing requires Molecule and Docker
pipenv shell
pip install molecule-docker
ansible-galaxy collection install community.general
molecule test
MIT
React
Typescript
Django
Laravel
Facebook
Microsoft
Google
Alibaba
D3
Tencent