mirror of
https://pagure.io/fedora-infra/ansible.git
synced 2026-05-01 22:11:01 +08:00
2ec055db6f
This will unify all the handlers to use first uppercase letter for ansible-lint to stop complaining. I went through all `notify:` occurrences and fixed them by running ``` set TEXT "text_to_replace"; set REPLACEMENT "replacement_text"; git grep -rlz "$TEXT" . | xargs -0 sed -i "s/$TEXT/$REPLACEMENT/g" ``` Then I went through all the changes and removed the ones that wasn't expected to be changed. Fixes https://pagure.io/fedora-infrastructure/issue/12391 Signed-off-by: Michal Konecny <mkonecny@redhat.com>
46 lines
1.3 KiB
YAML
46 lines
1.3 KiB
YAML
# fedmsg has a relatively static CRL (certificate revocation list) that
|
|
# needs to be publicly accessible. We pull it here from the private
|
|
# repo and throw it into fedoraproject.org/fedmsg/crl.pem
|
|
# See https://infrastructure.fedoraproject.org/infra/docs/fedmsg-certs.txt
|
|
|
|
---
|
|
- name: Ensure dir for content exists
|
|
ansible.builtin.file: dest=/srv/web/fedmsg owner=apache group=apache mode=0755 state=directory
|
|
tags:
|
|
- fedmsg
|
|
- fedmsg/crl
|
|
- fedmsg/proxy
|
|
|
|
- name: Copy over our crl from the private repo
|
|
ansible.builtin.copy: >
|
|
src={{private}}/files/fedmsg-certs/keys/crl.pem dest=/srv/web/fedmsg/crl.pem
|
|
owner=root group=root mode=0644
|
|
tags:
|
|
- fedmsg
|
|
- fedmsg/crl
|
|
- fedmsg/proxy
|
|
|
|
# Also expose the ca cert. Everybody gets this and can read it. Public!
|
|
# End users (fedmsg-notify) need it to be able to validate our outbound
|
|
# messages.
|
|
- name: Copy over our CA cert from the private repo
|
|
ansible.builtin.copy: >
|
|
src={{private}}/files/fedmsg-certs/keys/ca.crt dest=/srv/web/fedmsg/ca.crt
|
|
owner=root group=root mode=0644
|
|
tags:
|
|
- fedmsg
|
|
- fedmsg/crl
|
|
- fedmsg/proxy
|
|
|
|
- name: Put the proxy config in place
|
|
ansible.builtin.template: >
|
|
src=fedmsg.conf
|
|
dest=/etc/httpd/conf.d/{{website}}/fedmsg.conf
|
|
owner=root group=root mode=0644
|
|
notify:
|
|
- Reload httpd
|
|
tags:
|
|
- fedmsg
|
|
- fedmsg/crl
|
|
- fedmsg/proxy
|