From f4f99dfdfcd0651f4365ab41716beffc1f147e35 Mon Sep 17 00:00:00 2001
From: Guilhem Moulin <guilhem@fripost.org>
Date: Tue, 8 Jul 2014 00:47:08 +0200
Subject: Add a tag 'tls_policy' to facilitate rekeying.

First generate all certs (-t genkey), then build the TLS policy maps (
-t tls_policy).
---
 roles/IMAP/tasks/mda.yml | 6 ++++++
 1 file changed, 6 insertions(+)

(limited to 'roles/IMAP/tasks')

diff --git a/roles/IMAP/tasks/mda.yml b/roles/IMAP/tasks/mda.yml
index 2d63f0e..698fd4f 100644
--- a/roles/IMAP/tasks/mda.yml
+++ b/roles/IMAP/tasks/mda.yml
@@ -42,17 +42,23 @@
   with_items: groups.MX | difference([inventory_hostname]) | sort
   register: relay_clientcerts
   changed_when: False
+  tags:
+    - tls_policy
 
 - name: Copy the Postfix relay clientcerts map
   template: src=etc/postfix/relay_clientcerts.j2
             dest=/etc/postfix-{{ postfix_instance[inst].name }}/relay_clientcerts
             owner=root group=root
             mode=0644
+  tags:
+    - tls_policy
 
 - name: Compile the Postfix relay clientcerts map
   postmap: cmd=postmap src=/etc/postfix-{{ postfix_instance[inst].name }}/relay_clientcerts db=cdb
            owner=root group=root
            mode=0644
+  tags:
+    - tls_policy
 
 - meta: flush_handlers
 
-- 
cgit v1.2.3