sebclem/ansible-role-nginx
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Allow making use of Ansible-vault to encrypt and decrypt sensitive certs and keys (#95)

Browse Source 
* Allow making use of Ansible-vault to encrypt sensitive certs and keys
This commit is contained in:
Izak Eygelaar 2019-02-01 20:59:56 +02:00 committed by Grzegorz Dzien
parent 8ead2b7c00
commit f79e6d0210
2 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
tasks/conf/upload-config.yml
View File

@ -68,6 +68,8 @@
copy: copy:
src: "{{ item }}" src: "{{ item }}"
dest: "{{ nginx_ssl_crt_upload_dest }}" dest: "{{ nginx_ssl_crt_upload_dest }}"
mode: 0640
decrypt: yes
backup: yes backup: yes
with_fileglob: "{{ nginx_ssl_crt_upload_src }}" with_fileglob: "{{ nginx_ssl_crt_upload_src }}"
when: nginx_ssl_upload_enable when: nginx_ssl_upload_enable
@ -76,6 +78,8 @@
copy: copy:
src: "{{ item }}" src: "{{ item }}"
dest: "{{ nginx_ssl_key_upload_dest }}" dest: "{{ nginx_ssl_key_upload_dest }}"
mode: 0640
decrypt: yes
backup: yes backup: yes
with_fileglob: "{{ nginx_ssl_key_upload_src }}" with_fileglob: "{{ nginx_ssl_key_upload_src }}"
when: nginx_ssl_upload_enable when: nginx_ssl_upload_enable

1
tasks/plus/setup-license.yml
View File

@ -8,6 +8,7 @@
copy: copy:
src: "{{ item }}" src: "{{ item }}"
dest: /etc/ssl/nginx dest: /etc/ssl/nginx
decrypt: yes
with_items: with_items:
- "{{ nginx_license.certificate }}" - "{{ nginx_license.certificate }}"
- "{{ nginx_license.key }}" - "{{ nginx_license.key }}"