Use a per-host keydir

Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
This commit is contained in:
Patrick Uiterwijk 2017-12-05 01:44:16 +00:00
parent d73314a5a3
commit 2aeb91e62f

View file

@ -122,7 +122,7 @@
# TODO: Get expired certificates, and add them to certs_to_sign
- set_fact:
pubkeydir: "/tmp/sshkeysign"
pubkeydir: "/tmp/sshkeysign/{{inventory_hostname}}"
tags:
- basessh
- sshd_cert