diff options
| author | Guilhem Moulin <guilhem@fripost.org> | 2016-06-15 18:08:48 +0200 |
|---|---|---|
| committer | Guilhem Moulin <guilhem@fripost.org> | 2016-06-15 18:13:09 +0200 |
| commit | 02d4a5892bb3019d448c453ad279788fcd3f1531 (patch) | |
| tree | f8e023267ac8af5cab8aa5413c52c37c6d9257af /roles/IMAP/tasks/imap.yml | |
| parent | 97e78349145156ca6565ee5b2af54983a6fdd3a6 (diff) | |
certs/public: fetch each cert's pubkey (SPKI), not the cert itself.
To avoid new commits upon cert renewal.
Diffstat (limited to 'roles/IMAP/tasks/imap.yml')
| -rw-r--r-- | roles/IMAP/tasks/imap.yml | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/roles/IMAP/tasks/imap.yml b/roles/IMAP/tasks/imap.yml index a596c42..d7bbfb9 100644 --- a/roles/IMAP/tasks/imap.yml +++ b/roles/IMAP/tasks/imap.yml @@ -63,41 +63,41 @@ - flagged - recent - unseen - name: Create directory /home/mail/spamspool file: path=/home/mail/spamspool state=directory owner=vmail group=vmail mode=0700 - name: Create directory /etc/dovecot/ssl file: path=/etc/dovecot/ssl state=directory owner=root group=root mode=0755 - name: Fetch Dovecot's X.509 certificate # Ensure we don't fetch private data become: False - fetch_cmd: cmd="openssl x509" + fetch_cmd: cmd="openssl x509 -noout -pubkey" stdin=/etc/dovecot/ssl/imap.fripost.org.pem dest=certs/public/imap.fripost.org.pem tags: - genkey - name: Configure Dovecot copy: src=etc/dovecot/{{ item }} dest=/etc/dovecot/{{ item }} owner=root group=root mode=0644 register: r1 with_items: - conf.d/10-auth.conf - conf.d/10-logging.conf - conf.d/10-mail.conf - conf.d/10-ssl.conf - conf.d/15-mailboxes.conf - conf.d/20-imap.conf - conf.d/20-lmtp.conf - conf.d/90-plugin.conf |