WarlockFish/fedora-infra_ansible
1
0
Fork 0
mirror of https://pagure.io/fedora-infra/ansible.git synced 2026-04-30 21:41:53 +08:00
Code Issues Packages Projects Releases Wiki Activity

postfix: use a chain file for ssl certs

Browse Source 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
This commit is contained in:
Kevin Fenzi
2022-07-21 16:25:10 -07:00
parent b54b8a0bb7
commit a336ba2a9e
1 changed files with 7 additions and 17 deletions
Download Patch File Download Diff File Expand all files Collapse all files

24
roles/base/tasks/postfix.yml
View File

@@ -80,26 +80,16 @@
tags:
- postfix
- name: install /etc/pki/tls/certs/gateway.crt
# Install gateway tls cert as a pem file.
# This has: private key, then cert, then intermediate cert
# This cert is a digicert one, renew it there.
- name: install /etc/pki/tls/private/gateway-chain.pem
copy:
src="{{private}}/files/smtpd/gateway.complete.crt"
dest=/etc/pki/tls/certs/gateway.crt
src="{{private}}/files/smtpd/gateway-chain.pem"
dest=/etc/pki/tls/private/gateway-chain.pem
owner=root
group=root
mode=0644
when: inventory_hostname.startswith(('bastion','smtp-mm')) and env != 'staging'
notify:
- restart postfix
tags:
- postfix
- name: Copy gateway.key
copy:
src="{{private}}/files/smtpd/gateway.key"
dest=/etc/pki/tls/private/gateway.key
owner=root
group=postfix
mode=0640
mode=0600
when: inventory_hostname.startswith(('bastion','smtp-mm')) and env != 'staging'
notify:
- restart postfix