Allow making use of Ansible-vault to encrypt and decrypt sensitive certs and keys (#95)

* Allow making use of Ansible-vault to encrypt sensitive certs and keys
This commit is contained in:
Izak Eygelaar 2019-02-01 20:59:56 +02:00 committed by Grzegorz Dzien
parent 8ead2b7c00
commit f79e6d0210
2 changed files with 5 additions and 0 deletions

View File

@ -68,6 +68,8 @@
copy:
src: "{{ item }}"
dest: "{{ nginx_ssl_crt_upload_dest }}"
mode: 0640
decrypt: yes
backup: yes
with_fileglob: "{{ nginx_ssl_crt_upload_src }}"
when: nginx_ssl_upload_enable
@ -76,6 +78,8 @@
copy:
src: "{{ item }}"
dest: "{{ nginx_ssl_key_upload_dest }}"
mode: 0640
decrypt: yes
backup: yes
with_fileglob: "{{ nginx_ssl_key_upload_src }}"
when: nginx_ssl_upload_enable

View File

@ -8,6 +8,7 @@
copy:
src: "{{ item }}"
dest: /etc/ssl/nginx
decrypt: yes
with_items:
- "{{ nginx_license.certificate }}"
- "{{ nginx_license.key }}"