summaryrefslogtreecommitdiffstats
path: root/roles/common/tasks
diff options
context:
space:
mode:
authorGuilhem Moulin <guilhem@fripost.org>2014-07-08 00:47:08 +0200
committerGuilhem Moulin <guilhem@fripost.org>2015-06-07 02:52:43 +0200
commitf4f99dfdfcd0651f4365ab41716beffc1f147e35 (patch)
tree0ffd8d57172bf7bf51153bc9beb8458337eecf65 /roles/common/tasks
parentdd344abc3189a59ffecd8a54bc90507d0d656cc5 (diff)
Add a tag 'tls_policy' to facilitate rekeying.
First generate all certs (-t genkey), then build the TLS policy maps ( -t tls_policy).
Diffstat (limited to 'roles/common/tasks')
-rw-r--r--roles/common/tasks/mail.yml6
1 files changed, 6 insertions, 0 deletions
diff --git a/roles/common/tasks/mail.yml b/roles/common/tasks/mail.yml
index 571b66f..009c4c6 100644
--- a/roles/common/tasks/mail.yml
+++ b/roles/common/tasks/mail.yml
@@ -91,6 +91,8 @@
register: tls_policy
changed_when: False
when: "'out' not in group_names"
+ tags:
+ - tls_policy
- name: Copy the Postfix TLS policy map
template: src=etc/postfix/tls_policy.j2
@@ -98,12 +100,16 @@
owner=root group=root
mode=0644
when: "'out' not in group_names"
+ tags:
+ - tls_policy
- name: Compile the Postfix TLS policy map
postmap: cmd=postmap src=/etc/postfix/tls_policy db=cdb
owner=root group=root
mode=0644
when: "'out' not in group_names"
+ tags:
+ - tls_policy
- name: Start Postfix
service: name=postfix state=started