chore:: update
This commit is contained in:
+31
-2
@@ -1,9 +1,13 @@
|
||||
---
|
||||
- name: Installation et configuration du frontend et backend
|
||||
hosts: replica-prod
|
||||
hosts: prod-uber
|
||||
become: true
|
||||
gather_facts: true
|
||||
|
||||
vars:
|
||||
ssl_dir: "{{ docker_dir }}/certs"
|
||||
ssl_domain: mln-uber.club
|
||||
|
||||
tasks:
|
||||
- name: Update apt cache
|
||||
apt:
|
||||
@@ -169,4 +173,29 @@
|
||||
owner: "{{ docker_user }}"
|
||||
group: "{{ docker_group }}"
|
||||
mode: "0750"
|
||||
tags: project
|
||||
tags: [certs]
|
||||
|
||||
- name: Générer la clé privée RSA 2048
|
||||
community.crypto.openssl_privatekey:
|
||||
path: "{{ ssl_dir }}/privkey.pem"
|
||||
type: RSA
|
||||
size: 2048
|
||||
mode: "0600"
|
||||
tags: [certs]
|
||||
|
||||
- name: Générer la CSR pour le certificat auto-signé
|
||||
community.crypto.openssl_csr:
|
||||
path: "{{ ssl_dir }}/selfsigned.csr"
|
||||
privatekey_path: "{{ ssl_dir }}/privkey.pem"
|
||||
common_name: "{{ ssl_domain }}"
|
||||
tags: [certs]
|
||||
|
||||
- name: Générer le certificat auto-signé
|
||||
community.crypto.x509_certificate:
|
||||
path: "{{ ssl_dir }}/fullchain.pem"
|
||||
privatekey_path: "{{ ssl_dir }}/privkey.pem"
|
||||
csr_path: "{{ ssl_dir }}/selfsigned.csr"
|
||||
provider: selfsigned
|
||||
selfsigned_not_after: "+3650d"
|
||||
mode: "0644"
|
||||
tags: [certs]
|
||||
|
||||
Reference in New Issue
Block a user