ansible-role-mastodon/tasks/bare/selfsigned-ssl.yml

20 lines
593 B
YAML

---
- name: Create folder location for self-signed SSL certs
become: true
file:
path: "{{ item }}"
state: directory
owner: root
group: root
recurse: true
loop:
- "{{ self_signed_cert_location }}"
- "{{ self_signed_key_location }}"
- name: Create self-signed certificate
become: true
shell: >
openssl req -x509 -nodes -subj '/CN={{ mastodon_host }}' -days 365
-newkey rsa:4096 -sha256 -keyout '{{ self_signed_key_location }}/server.key' -out '{{ self_signed_cert_location }}/server.crt'
creates='{{ self_signed_cert_location }}/server.crt'