diff options
| author | Guilhem Moulin <guilhem@fripost.org> | 2015-12-02 23:14:30 +0100 |
|---|---|---|
| committer | Guilhem Moulin <guilhem@fripost.org> | 2015-12-03 14:57:28 +0100 |
| commit | 03bc468e0dab47c9720d3ffa78ab3880d11870b5 (patch) | |
| tree | 6e6236538504a4c0398c688151b61e77718f7d5e /roles/git/tasks/cgit.yml | |
| parent | 0258fa4ce96967351f52a9a538a287351392abf2 (diff) | |
Automatically fetch X.509 certificates, and add them to git.
Diffstat (limited to 'roles/git/tasks/cgit.yml')
| -rw-r--r-- | roles/git/tasks/cgit.yml | 10 |
1 files changed, 10 insertions, 0 deletions
diff --git a/roles/git/tasks/cgit.yml b/roles/git/tasks/cgit.yml index a8be1fc..27e0554 100644 --- a/roles/git/tasks/cgit.yml +++ b/roles/git/tasks/cgit.yml @@ -92,20 +92,30 @@ owner=root group=root mode=0644 register: r2 notify: - Restart Nginx - name: Create /etc/nginx/sites-enabled/git file: src=../sites-available/git dest=/etc/nginx/sites-enabled/git owner=root group=root state=link force=yes register: r3 notify: - Restart Nginx - name: Start Nginx service: name=nginx state=started when: not (r1.changed or r2.changed or r3.changed) - meta: flush_handlers + +- name: Fetch Nginx's X.509 certificate + # Ensure we don't fetch private data + sudo: False + fetch: src=/etc/nginx/ssl/git.fripost.org.pem + dest=certs/public/ + fail_on_missing=yes + flat=yes + tags: + - genkey |