summaryrefslogtreecommitdiffstats
path: root/roles/MX/tasks
diff options
context:
space:
mode:
authorGuilhem Moulin <guilhem@fripost.org>2015-12-02 23:14:30 +0100
committerGuilhem Moulin <guilhem@fripost.org>2015-12-03 14:57:28 +0100
commit03bc468e0dab47c9720d3ffa78ab3880d11870b5 (patch)
tree6e6236538504a4c0398c688151b61e77718f7d5e /roles/MX/tasks
parent0258fa4ce96967351f52a9a538a287351392abf2 (diff)
Automatically fetch X.509 certificates, and add them to git.
Diffstat (limited to 'roles/MX/tasks')
-rw-r--r--roles/MX/tasks/main.yml11
1 files changed, 11 insertions, 0 deletions
diff --git a/roles/MX/tasks/main.yml b/roles/MX/tasks/main.yml
index 4302502..da6923b 100644
--- a/roles/MX/tasks/main.yml
+++ b/roles/MX/tasks/main.yml
@@ -78,6 +78,17 @@
- name: Start Postfix
service: name=postfix state=started
+- name: Fetch Postfix's X.509 certificate
+ # Ensure we don't fetch private data
+ sudo: False
+ # `/usr/sbin/postmulti -i mx -x /usr/sbin/postconf -xh smtpd_tls_cert_file`
+ fetch: src=/etc/ssl/certs/ssl-cert-snakeoil.pem
+ dest=certs/public/mx{{ mxno | default('') }}.fripost.org.pem
+ fail_on_missing=yes
+ flat=yes
+ tags:
+ - genkey
+
- name: Install 'postfix_mailqueue_' Munin wildcard plugin
file: src=/usr/local/share/munin/plugins/postfix_mailqueue_