ansible_hacky_pki/example.yml

#!/usr/bin/env ansible-playbook
---
- hosts: all
  roles:
    - generate-cert
  vars:
    directory: /etc/nginx/certs/
    cname: example.com

- hosts: all
  tasks: Copy the CA certificate to remote host, for mutual SSL auth for instance
    - name: 
      copy:
        content: "{{ ca_cert }}"
        dest: /etc/nginx/certs/ca.crt
create the directory structure 2021-09-08 15:59:32 +02:00			`#!/usr/bin/env ansible-playbook`
			`---`
			`- hosts: all`
			`roles:`
			`- generate-cert`
generate a private key (for now, on remote host) 2021-09-08 20:21:02 +02:00			`vars:`
send the cert in the right file and clean localhost 2021-09-09 22:29:46 +02:00			`directory: /etc/nginx/certs/`
			`cname: example.com`
add an example for copying the CA cert 2021-09-20 14:11:58 +02:00
			`- hosts: all`
			`tasks: Copy the CA certificate to remote host, for mutual SSL auth for instance`
			`- name:`
			`copy:`
			`content: "{{ ca_cert }}"`
			`dest: /etc/nginx/certs/ca.crt`