Changeset 04d89726 in darkpeak-services for roles/tls/tasks/configure-tls-cert.yml

Timestamp:

Oct 13, 2018, 2:00:32 PM (2 years ago)

Author:

Mat Booth <mat.booth@…>

Branches:

keycloak, master

Children:

b3606134

Parents:

f97b97d9

Message:

Workaround certificate requisition problem when domain is null

File:

• roles/tls/tasks/configure-tls-cert.yml (modified) (6 diffs)

roles/tls/tasks/configure-tls-cert.yml

@@ -40 +40 @@
     - "/etc/letsencrypt/archive/{{ domain }}"
     - "/etc/letsencrypt/live/{{ domain }}"
+  when: domain != ""
 
 - name: Check for already installed certificate
@@ -45 +46 @@
     path: "/etc/letsencrypt/live/{{ domain }}/fullchain.pem"
   register: tls_cert
+  when: domain != ""
 
 - name: Install self-signed TLS certificate
@@ -53 +55 @@
     group: ssl-cert
     mode: 0640
-  when: not tls_cert.stat.exists
+  when:
+    - not tls_cert.stat.exists
+    - domain != ""
 
 - name: Check for already installed key
@@ -59 +63 @@
     path: "/etc/letsencrypt/live/{{ domain }}/privkey.pem"
   register: tls_key
+  when: domain != ""
 
 - name: Install self-signed TLS certificate key
@@ -67 +72 @@
     group: ssl-cert
     mode: 0640
-  when: not tls_key.stat.exists
+  when:
+    - not tls_key.stat.exists
+    - domain != ""
 
 - name: Install symlinks to TLS certificate and key
@@ -80 +87 @@
     - { src: "{{ domain }}/fullchain.pem", dest: "{{ domain }}.pem" }
     - { src: "{{ domain }}/privkey.pem",   dest: "{{ domain }}.key" }
+  when: domain != ""