ansible-base/roles/ldap_server/tasks/cert.yml
2020-08-09 11:37:21 +02:00

30 lines
875 B
YAML

---
- name: check if key and cert already present in ldap configuration folder
stat:
path: "{{ openldap_confdir }}/sasl2/privkey.pem"
register: privkey_exist
- name: if key and cert not already present, copy them
shell: "cp -pf /etc/letsencrypt/live/l01.wirebrass.fr/*.pem {{ openldap_confdir }}/sasl2/"
when: not privkey_exist.stat.exists
- name: if key and cert not already present, fix permissions
shell: "chown openldap: {{ openldap_confdir }}/sasl2/*.pem"
when: not privkey_exist.stat.exists
- name: link to ca-certificates created
file:
src: /etc/ssl/certs/ca-certificates.crt
dest: "{{ openldap_confdir }}/sasl2/ca-certificates.crt"
state: link
- name: OpenLDAP DH Parameters generated
openssl_dhparam:
path: "{{ openldap_confdir }}/sasl2/slapd.dh.params"
size: 2048
owner: openldap
group: openldap
mode: 0600