956 B
956 B
Ansible Role for certificate generation
Tested:
- Debian 11
Functionality
- Package installation
- Ansible dependencies (minimal)
- Configuration
- Two Possible Modes
- Generate Self-Signed certificate
- Create an internal-ca and generate certificates using it
- Default config:
- Mode => Self-Signed
- Default opt-ins: *
- Default opt-outs: *
- Two Possible Modes
Info
-
Note: this role currently only supports debian-based systems
-
Note: Most of this functionality can be opted in or out using the main defaults file and variables!
Requirements
- Community collection:
ansible-galaxy install -r requirements.yml
Usage
Define the config as needed:
app:
Run the playbook:
ansible-playbook -K -D -i inventory/hosts.yml playbook.yml
There are also some useful tags available:
- base => only configure basics; sites will not be touched
- sites
- config
- certs