From 03bc468e0dab47c9720d3ffa78ab3880d11870b5 Mon Sep 17 00:00:00 2001
From: Guilhem Moulin <guilhem@fripost.org>
Date: Wed, 2 Dec 2015 23:14:30 +0100
Subject: Automatically fetch X.509 certificates, and add them to git.

---
 roles/wiki/tasks/main.yml | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)

(limited to 'roles/wiki/tasks')

diff --git a/roles/wiki/tasks/main.yml b/roles/wiki/tasks/main.yml
index 708f2a1..22a5831 100644
--- a/roles/wiki/tasks/main.yml
+++ b/roles/wiki/tasks/main.yml
@@ -103,6 +103,22 @@
   notify:
     - Restart Nginx
 
+- name: Start Nginx
+  service: name=nginx state=started
+  when: not (r1.changed or r2.changed or r3.changed)
+
+- meta: flush_handlers
+
+- name: Fetch Nginx's X.509 certificate
+  # Ensure we don't fetch private data
+  sudo: False
+  fetch: src=/etc/nginx/ssl/fripost.org.pem
+         dest=certs/public/
+         fail_on_missing=yes
+         flat=yes
+  tags:
+    - genkey
+
 - name: Create directory /var/www/fripost.org/autoconfig/mail
   file: path=/var/www/fripost.org/autoconfig/mail
         state=directory
-- 
cgit v1.2.3