iac/rproxy
3
0
Fork 0
Code Issues Pull Requests Packages Releases 9 Activity

change cnf

Browse Source
This commit is contained in:
apavlov
2024-07-09 21:49:24 +03:00
parent 0d77b94b59
commit b617726baa
3 changed files with 27 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
roles/rproxy/tasks/main.yml
View File

@@ -79,7 +79,7 @@
- name: Generate server csr
ansible.builtin.shell:
cmd: 'openssl req -key {{ rproxy_dir }}/certs/{{ rproxy_service_name }}.key -new -out {{ rproxy_dir }}/certs/{{ rproxy_service_name }}.csr -config {{ rproxy_dir }}/certs/{{ rproxy_service_name }}.cnf -days 365'
cmd: 'openssl req -key {{ rproxy_dir }}/certs/{{ rproxy_service_name }}.key -new -out {{ rproxy_dir }}/certs/{{ rproxy_service_name }}.csr -config {{ rproxy_dir }}/certs/{{ rproxy_service_name }}.cnf'
- name: Sign server certificate
ansible.builtin.shell:

5
roles/rproxy/templates/server.cnf.j2
View File

@@ -1,4 +1,3 @@
[ req ]
prompt = no
days = 365
distinguished_name = {{ rproxy_service_name }}.{{ domain.stdout }}
@@ -15,10 +14,10 @@ commonName = {{ rproxy_service_name }}.{{ domain.stdout }}
emailAddress = admin@{{ domain.stdout }}
[ v3_req ]
basicConstraints = CA:false
basicConstraints = critical; CA:false
extendedKeyUsage = serverAuth
subjectAltName = @sans
[sans]
[ sans ]
DNS.1 = *.{{ domain.stdout }}
IP.1 = {{ rproxy_service_address }}