summaryrefslogtreecommitdiffstats
path: root/common.yml
diff options
context:
space:
mode:
authorGuilhem Moulin <guilhem@fripost.org>2015-12-28 14:40:05 +0100
committerGuilhem Moulin <guilhem@fripost.org>2015-12-28 14:40:28 +0100
commitfd412b529a59e1f3981eb18d54b7472e1cca2a20 (patch)
tree7459181e2d252b384464cbcaa783f468eb5bd6f4 /common.yml
parentf827376dd778e4b96f1c8a9b3db12faa516ebed5 (diff)
Only install letsencrypt-tiny to the relevant hosts.
Diffstat (limited to 'common.yml')
-rw-r--r--common.yml6
1 files changed, 5 insertions, 1 deletions
diff --git a/common.yml b/common.yml
index d689e04..cdf4372 100644
--- a/common.yml
+++ b/common.yml
@@ -1,43 +1,47 @@
---
# XXX: This organization is unfortunate. As of Ansible 1.4, roles are
# applied playbook by playbook and not globally for the whole inventory;
# therefore if two playbooks are given the role 'common', the tasks
# defined in 'common' would be run twice.
# The quickfix to ensure that plays are role-disjoint is to create a
# separate play for each role. Of course the downside is that we loose
# (most of) the advantage of roles...
- name: Common tasks
hosts: all
roles:
- common
- name: Base system
hosts: IMAP:MX:MSA:webmail:lists:wiki:git
gather_facts: False
tasks:
+ - name: Install dependencies for letsencrypt-tiny
+ apt: pkg={{ item }}
+ with_items:
+ - liblwp-protocol-https-perl
+ - socat
- name: Copy LetsEncrypt's ACME client
copy: src=deb/letsencrypt-tiny_0.1-1_all.deb
dest=/tmp
notify: Install LetsEncrypt's ACME client
- - genkey
- name: Create a user 'letsencrypt'
user: name=letsencrypt system=yes
group=nogroup
createhome=no
home=/nonexistent
shell=/usr/sbin/nologin
password=!
state=present
handlers:
- name: Install LetsEncrypt's ACME client
apt: deb=/tmp/letsencrypt-tiny_0.1-1_all.deb
tags:
- letsencrypt
- name: Common SQL tasks
hosts: MDA:webmail:lists:bacula-dir
gather_facts: False
tags: mysql,sql
roles:
- common-SQL