Skip to content
Snippets Groups Projects
Commit cc15d869 authored by nimrod's avatar nimrod
Browse files

- Correct handling of TLS key and certs, for that adding the ca-store as

a dependency and the modules submodule.
- Removed adarnimrod prefix from the name of dependencies for easier
development.
parent a04f9fd4
No related branches found
No related tags found
No related merge requests found
[submodule "library/shore"]
path = library/shore
url = https://www.shore.co.il/git/ansible-modules
......@@ -2,3 +2,5 @@
# defaults file for syslog-forward
syslog_server:
syslog_key_file: /etc/ssl/private/ssl-cert-snakeoil.key
syslog_cert_file: /etc/ssl/certs/ssl-cert-snakeoil.pem
shore @ 2efdc7b0
Subproject commit 2efdc7b0a7d963ca5f2d7887530776906b319486
......@@ -13,4 +13,6 @@ galaxy_info:
versions:
- jessie
galaxy_tags: [ syslog ]
dependencies: []
dependencies:
- src: adarnimrod.ca-store
name: ca-store
{#
$DefaultNetstreamDriver gtls
$DefaultNetstreamDriverCAFile {{ tls_ca_cert_path }}
$DefaultNetstreamDriverCertFile {{ tls_cert_path }}
$DefaultNetstreamDriverKeyFile {{ tls_key_path }}
$DefaultNetstreamDriverCAFile /etc/ssl/certs/ca-certificates.crt
$DefaultNetstreamDriverCertFile {{ syslog_cert_file }}
$DefaultNetstreamDriverKeyFile {{ syslog_key_file }}
$ActionSendStreamDriverAuthMode x509/name
#}
......
---
- hosts: syslog-forward-openbsd
gather_facts: false
roles: [adarnimrod.openbsd-bootstrap]
roles: [openbsd-bootstrap]
- hosts: syslog-forward-xenial
gather_facts: false
roles: [adarnimrod.debian-bootstrap]
roles: [debian-bootstrap]
- hosts: all
strategy: free
......
---
- src: adarnimrod.openbsd-bootstrap
name: openbsd-bootstrap
- src: adarnimrod.debian-bootstrap
name: debian-bootstrap
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment