From 03bc468e0dab47c9720d3ffa78ab3880d11870b5 Mon Sep 17 00:00:00 2001
From: Guilhem Moulin <guilhem@fripost.org>
Date: Wed, 2 Dec 2015 23:14:30 +0100
Subject: Automatically fetch X.509 certificates, and add them to git.

---
 roles/MX/tasks/main.yml | 11 +++++++++++
 1 file changed, 11 insertions(+)

(limited to 'roles/MX')

diff --git a/roles/MX/tasks/main.yml b/roles/MX/tasks/main.yml
index 4302502..da6923b 100644
--- a/roles/MX/tasks/main.yml
+++ b/roles/MX/tasks/main.yml
@@ -78,6 +78,17 @@
 - name: Start Postfix
   service: name=postfix state=started
 
+- name: Fetch Postfix's X.509 certificate
+  # Ensure we don't fetch private data
+  sudo: False
+  # `/usr/sbin/postmulti -i mx -x /usr/sbin/postconf -xh smtpd_tls_cert_file`
+  fetch: src=/etc/ssl/certs/ssl-cert-snakeoil.pem
+         dest=certs/public/mx{{ mxno | default('') }}.fripost.org.pem
+         fail_on_missing=yes
+         flat=yes
+  tags:
+    - genkey
+
 
 - name: Install 'postfix_mailqueue_' Munin wildcard plugin
   file: src=/usr/local/share/munin/plugins/postfix_mailqueue_
-- 
cgit v1.2.3