summaryrefslogtreecommitdiffstats
path: root/roles/out/tasks
diff options
context:
space:
mode:
authorGuilhem Moulin <guilhem@fripost.org>2014-07-08 00:47:08 +0200
committerGuilhem Moulin <guilhem@fripost.org>2015-06-07 02:52:43 +0200
commitf4f99dfdfcd0651f4365ab41716beffc1f147e35 (patch)
tree0ffd8d57172bf7bf51153bc9beb8458337eecf65 /roles/out/tasks
parentdd344abc3189a59ffecd8a54bc90507d0d656cc5 (diff)
Add a tag 'tls_policy' to facilitate rekeying.
First generate all certs (-t genkey), then build the TLS policy maps ( -t tls_policy).
Diffstat (limited to 'roles/out/tasks')
-rw-r--r--roles/out/tasks/main.yml6
1 files changed, 6 insertions, 0 deletions
diff --git a/roles/out/tasks/main.yml b/roles/out/tasks/main.yml
index 68f438f..791bfa3 100644
--- a/roles/out/tasks/main.yml
+++ b/roles/out/tasks/main.yml
@@ -16,17 +16,23 @@
with_items: groups.all | difference([inventory_hostname]) | sort
register: relay_clientcerts
changed_when: False
+ tags:
+ - tls_policy
- name: Copy the Postfix relay clientcerts map
template: src=etc/postfix/relay_clientcerts.j2
dest=/etc/postfix-{{ postfix_instance[inst].name }}/relay_clientcerts
owner=root group=root
mode=0644
+ tags:
+ - tls_policy
- name: Compile the Postfix relay clientcerts map
postmap: cmd=postmap src=/etc/postfix-{{ postfix_instance[inst].name }}/relay_clientcerts db=cdb
owner=root group=root
mode=0644
+ tags:
+ - tls_policy
- meta: flush_handlers