Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

deploy ssl cert on copr-fe

Browse source
This commit is contained in:
Miroslav Suchý 2014-04-01 12:35:27 +00:00
parent eb0b8c4c2f
commit f21ccbac8b
1 changed files with 20 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

21
playbooks/hosts/copr-fe.cloud.fedoraproject.org.yml
View file

@ -40,7 +40,7 @@
action: copy src="{{ files }}/copr/forward" dest=/root/.forward owner=root group=root action: copy src="{{ files }}/copr/forward" dest=/root/.forward owner=root group=root
- name: install copr-fe pkgs - name: install copr-fe pkgs
action: yum state=installed pkg={{ item }} action: yum state=latest pkg={{ item }}
with_items: with_items:
- copr-frontend - copr-frontend
- copr-selinux - copr-selinux
@ -48,6 +48,7 @@
- bash-completion - bash-completion
- fail2ban - fail2ban
- mod_ssl - mod_ssl
- system-config-firewall-base
tags: tags:
- packages - packages
@ -74,6 +75,24 @@
- --service=ssh - --service=ssh
- --service=https - --service=https
- --service=http - --service=http
- name: copy httpd ssl certificates (crt)
action: copy src="{{ puppet_private }}/httpd/copr-fe.fedoraproject.org.crt" dest="/etc/pki/tls/certs/" owner=root group=root mode=0600
tags:
- config
- name: copy httpd ssl certificates (key)
action: copy src="{{ puppet_private }}/httpd/copr-fe.fedoraproject.org.key" dest="/etc/pki/tls/private/" owner=root group=root mode=0600
tags:
- config
- lineinfile: dest=/etc/httpd/conf.d/coprs.conf regexp="SSLCertificateFile " insertafter="^#SSLCertificateFile " line="SSLCertificateFile /etc/pki/tls/certs/copr-fe.fedoraproject.org.crt"
notify:
- restart httpd
- lineinfile: dest=/etc/httpd/conf.d/coprs.conf regexp="SSLCertificateKeyFile " insertafter="^#SSLCertificateKeyFile " line="SSLCertificateKeyFile /etc/pki/tls/private/copr-fe.fedoraproject.org.key"
notify:
- restart httpd
- name: enable services - name: enable services
action: service state=running enabled=yes name={{ item }} action: service state=running enabled=yes name={{ item }}