mirror of
https://pagure.io/fedora-infra/ansible.git
synced 2026-03-20 03:57:02 +08:00
1e712cdc30
This reverts commit 4430178b29.
It's time to put this back before the cert expires and before we go into
Beta freeze. Hopefully the odd issue with armv7 qemu guests having a
time behind real time is not still happening.
90 lines
2.9 KiB
YAML
90 lines
2.9 KiB
YAML
- name: Set up those proxy certificates. Good gravy..
|
|
hosts: proxies_stg:proxies
|
|
user: root
|
|
gather_facts: True
|
|
|
|
vars_files:
|
|
- /srv/web/infra/ansible/vars/global.yml
|
|
- "/srv/private/ansible/vars.yml"
|
|
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
|
|
|
|
handlers:
|
|
- import_tasks: "{{ handlers_path }}/restart_services.yml"
|
|
|
|
roles:
|
|
|
|
- role: httpd/mod_ssl
|
|
|
|
- role: httpd/certificate
|
|
certname: wildcard-2020.fedoraproject.org
|
|
SSLCertificateChainFile: wildcard-2020.fedoraproject.org.intermediate.cert
|
|
|
|
- role: httpd/certificate
|
|
certname: wildcard-2022.fedoraproject.org
|
|
SSLCertificateChainFile: wildcard-2022.fedoraproject.org.intermediate.cert
|
|
|
|
- role: httpd/certificate
|
|
certname: wildcard-2020.id.fedoraproject.org
|
|
SSLCertificateChainFile: wildcard-2020.id.fedoraproject.org.intermediate.cert
|
|
|
|
- role: httpd/certificate
|
|
certname: wildcard-2020.stg.fedoraproject.org
|
|
SSLCertificateChainFile: wildcard-2020.stg.fedoraproject.org.intermediate.cert
|
|
when: env == "staging"
|
|
|
|
- role: httpd/certificate
|
|
certname: wildcard-2021.app.os.stg.fedoraproject.org
|
|
SSLCertificateChainFile: wildcard-2021.app.os.stg.fedoraproject.org.intermediate.cert
|
|
when: env == "staging"
|
|
tags:
|
|
- app.os.stg.fedoraproject.org
|
|
|
|
- role: httpd/certificate
|
|
certname: wildcard-2022.apps.ocp.stg.fedoraproject.org
|
|
SSLCertificateChainFile: wildcard-2022.apps.ocp.stg.fedoraproject.org.intermediate.cert
|
|
when: env == "staging"
|
|
tags:
|
|
- apps.ocp.stg.fedoraproject.org
|
|
|
|
- role: httpd/certificate
|
|
certname: wildcard-2021.app.os.fedoraproject.org
|
|
SSLCertificateChainFile: wildcard-2021.app.os.fedoraproject.org.intermediate.cert
|
|
tags:
|
|
- app.os.fedoraproject.org
|
|
|
|
- role: httpd/certificate
|
|
certname: wildcard-2022.apps.ocp.fedoraproject.org
|
|
SSLCertificateChainFile: wildcard-2021.apps.ocp.fedoraproject.org.intermediate.cert
|
|
tags:
|
|
- apps.ocp.fedoraproject.org
|
|
|
|
- role: httpd/certificate
|
|
certname: getfedora.org
|
|
SSLCertificateChainFile: getfedora.org.intermediate.cert
|
|
tags:
|
|
- getfedora.org
|
|
|
|
- role: httpd/certificate
|
|
certname: qa.stg.fedoraproject.org
|
|
SSLCertificateChainFile: qa.stg.fedoraproject.org.intermediate.cert
|
|
when: env == "staging"
|
|
|
|
- role: httpd/certificate
|
|
certname: qa.fedoraproject.org
|
|
SSLCertificateChainFile: qa.fedoraproject.org.intermediate.cert
|
|
|
|
- role: httpd/certificate
|
|
certname: mirrors.centos.org
|
|
SSLCertificateChainFile: mirrors.centos.org.intermediate.cert
|
|
when: env != "staging"
|
|
|
|
- role: httpd/certificate
|
|
certname: mirrors.stg.centos.org
|
|
SSLCertificateChainFile: mirrors.stg.centos.org.intermediate.cert
|
|
when: env == "staging"
|
|
|
|
# - role: httpd/certificate
|
|
# certname: secondary.koji.fedoraproject.org.letsencrypt
|
|
# SSLCertificateChainFile: secondary.koji.fedoraproject.org.letsencrypt.intermediate.crt
|
|
|