From 03bc468e0dab47c9720d3ffa78ab3880d11870b5 Mon Sep 17 00:00:00 2001 From: Guilhem Moulin Date: Wed, 2 Dec 2015 23:14:30 +0100 Subject: Automatically fetch X.509 certificates, and add them to git. --- roles/MSA/tasks/main.yml | 11 +++++++++++ 1 file changed, 11 insertions(+) (limited to 'roles/MSA/tasks') diff --git a/roles/MSA/tasks/main.yml b/roles/MSA/tasks/main.yml index 6b1551f..499880f 100644 --- a/roles/MSA/tasks/main.yml +++ b/roles/MSA/tasks/main.yml @@ -24,6 +24,17 @@ - name: Start Postfix service: name=postfix state=started +- name: Fetch Postfix's X.509 certificate + # Ensure we don't fetch private data + sudo: False + # `/usr/sbin/postmulti -i msa -x /usr/sbin/postconf -xh smtpd_tls_cert_file` + fetch: src=/etc/postfix/ssl/smtp.fripost.org.pem + dest=certs/public/ + fail_on_missing=yes + flat=yes + tags: + - genkey + - name: Install 'postfix_mailqueue_' Munin wildcard plugin file: src=/usr/local/share/munin/plugins/postfix_mailqueue_ -- cgit v1.2.3