diff options
| author | Guilhem Moulin <guilhem@fripost.org> | 2015-12-02 23:14:30 +0100 |
|---|---|---|
| committer | Guilhem Moulin <guilhem@fripost.org> | 2015-12-03 14:57:28 +0100 |
| commit | 03bc468e0dab47c9720d3ffa78ab3880d11870b5 (patch) | |
| tree | 6e6236538504a4c0398c688151b61e77718f7d5e /roles/MX/tasks | |
| parent | 0258fa4ce96967351f52a9a538a287351392abf2 (diff) | |
Automatically fetch X.509 certificates, and add them to git.
Diffstat (limited to 'roles/MX/tasks')
| -rw-r--r-- | roles/MX/tasks/main.yml | 11 |
1 files changed, 11 insertions, 0 deletions
diff --git a/roles/MX/tasks/main.yml b/roles/MX/tasks/main.yml index 4302502..da6923b 100644 --- a/roles/MX/tasks/main.yml +++ b/roles/MX/tasks/main.yml @@ -78,6 +78,17 @@ - name: Start Postfix service: name=postfix state=started +- name: Fetch Postfix's X.509 certificate + # Ensure we don't fetch private data + sudo: False + # `/usr/sbin/postmulti -i mx -x /usr/sbin/postconf -xh smtpd_tls_cert_file` + fetch: src=/etc/ssl/certs/ssl-cert-snakeoil.pem + dest=certs/public/mx{{ mxno | default('') }}.fripost.org.pem + fail_on_missing=yes + flat=yes + tags: + - genkey + - name: Install 'postfix_mailqueue_' Munin wildcard plugin file: src=/usr/local/share/munin/plugins/postfix_mailqueue_ |