progress

roles/rproxy/tasks/main.yml

@@ -3,44 +3,97 @@
   ansible.builtin.shell:
     cmd: hostname -d
   register: domain
+  tags:
+    - install
+    - add_config
 
-- name: Install dependencies
-  ansible.builtin.apt:
-    name:
-      - docker.io
-      - docker-compose
-    update_cache: yes
+- name: Install rproxy
+  block:
+    - name: Install dependencies
+      ansible.builtin.apt:
+        name:
+          - docker.io
+          - docker-compose
+        update_cache: yes
 
-- name: Remove rproxy dir
-  ansible.builtin.file:
-    path: "{{ rproxy_dir }}"
-    state: absent
+    - name: Remove rproxy dir
+      ansible.builtin.file:
+        path: "{{ rproxy_dir }}"
+        state: absent
 
-- name: Create rproxy dir
-  ansible.builtin.file:
-    path: "{{ rproxy_dir }}"
-    state: directory
+    - name: Create rproxy dir
+      ansible.builtin.file:
+        path: "{{ rproxy_dir }}"
+        state: directory
 
-- name: Create sites dir
-  ansible.builtin.file:
-    path: "{{ rproxy_dir }}/sites"
-    state: directory
+    - name: Create sites dir
+      ansible.builtin.file:
+        path: "{{ rproxy_dir }}/sites"
+        state: directory
 
-- name: Copy docker-compose
-  ansible.builtin.template:
-    src: templates/docker-compose.yml.j2
-    dest: "{{ rproxy_dir }}/docker-compose.yml"
+    - name: Create certs dir
+      ansible.builtin.file:
+        path: "{{ rproxy_dir }}/certs"
+        state: directory
 
-- name: Copy nginx.conf
-  ansible.builtin.copy:
-    src: files/nginx.conf
-    dest: "{{ rproxy_dir }}/nginx.conf"
+    - name: Copy docker-compose
+      ansible.builtin.template:
+        src: templates/docker-compose.yml.j2
+        dest: "{{ rproxy_dir }}/docker-compose.yml"
 
-- name: Copy server.conf
-  ansible.builtin.template:
-    src: templates/server.conf.j2
-    dest: "{{ rproxy_dir }}/sites/server.conf"
+    - name: Copy nginx.conf
+      ansible.builtin.copy:
+        src: files/nginx.conf
+        dest: "{{ rproxy_dir }}/nginx.conf"
+
+    - name: Copy RootCA certificate
+      ansible.builtin.copy:
+        src: files/RootCA.crt
+        dest: '{{ rproxy_dir }}/certs/RootCA.crt'
+    
+    - name: Copy RootCA key
+      ansible.builtin.copy:
+        src: files/RootCA.key
+        dest: '{{ rproxy_dir }}/certs/RootCA.key'
+
+    - name: Copy server certificate cnf
+      ansible.builtin.template:
+        src: templates/server.cnf.j2
+        dest: '{{ rproxy_dir }}/certs/server.cnf'
+
+    - name: Generate server key
+      ansible.builtin.shell:
+        cmd: 'openssl genrsa -out {{ rproxy_dir }}/certs/{{ domain.stdout }}.key 2048'
+
+    - name: Generate server csr
+      ansible.builtin.shell:
+        cmd: 'openssl req -key {{ rproxy_dir }}/certs/{{ domain.stdout }}.key -new -out {{ rproxy_dir }}/certs/{{ domain.stdout }}.csr -config {{ rproxy_dir }}/certs/server.cnf'
+
+    - name: Sign server certificate
+      ansible.builtin.shell:
+        cmd: 'openssl x509 -req -CA {{ rproxy_dir }}/certs/RootCA.crt -CAkey {{ rproxy_dir }}/certs/RootCA.key -in {{ rproxy_dir }}/certs/{{ domain.stdout }}.csr -out {{ rproxy_dir }}/certs/{{ domain.stdout }}.crt -CAcreateserial'
+
+    - name: Delete csr
+      ansible.builtin.file:
+        path: "{{ rproxy_dir }}/certs/{{ domain.stdout }}.csr"
+        state: absent
+
+    - name: Start rproxy
+      community.docker.docker_compose:
+        project_src: "{{ rproxy_dir }}"
+  tags: install
+
+- name: Create configs
+  block:
+    - name: Copy server.conf
+      ansible.builtin.template:
+        src: templates/server.conf.j2
+        dest: "{{ rproxy_dir }}/sites/{{  rproxy_service_name  }}.conf"
+
+    - name: Restart rproxy
+      community.docker.docker_compose:
+        project_src: "{{ rproxy_dir }}"
+        build: false
+        restarted: true
+  tags: add_config
 
-- name: Start rproxy
-  community.docker.docker_compose:
-    project_src: "{{ rproxy_dir }}"