mirror of
https://github.com/trailofbits/algo.git
synced 2025-09-08 21:13:28 +02:00
27 lines
1 KiB
YAML
27 lines
1 KiB
YAML
---
|
|
|
|
- name: Copy the keys to the strongswan directory
|
|
copy:
|
|
src: "{{ item.src }}"
|
|
dest: "{{ item.dest }}"
|
|
owner: "{{ item.owner }}"
|
|
group: "{{ item.group }}"
|
|
mode: "{{ item.mode }}"
|
|
with_items:
|
|
- src: "configs/{{ DNS_subject_alt_name }}/pki/cacert.pem"
|
|
dest: "{{ config_prefix|default('/') }}etc/ipsec.d/cacerts/ca.crt"
|
|
owner: strongswan
|
|
group: "{{ root_group|default('root') }}"
|
|
mode: "0600"
|
|
- src: "configs/{{ DNS_subject_alt_name }}/pki/certs/{{ DNS_subject_alt_name }}.crt"
|
|
dest: "{{ config_prefix|default('/') }}etc/ipsec.d/certs/{{ DNS_subject_alt_name }}.crt"
|
|
owner: strongswan
|
|
group: "{{ root_group|default('root') }}"
|
|
mode: "0600"
|
|
- src: "configs/{{ DNS_subject_alt_name }}/pki/private/{{ DNS_subject_alt_name }}.key"
|
|
dest: "{{ config_prefix|default('/') }}etc/ipsec.d/private/{{ DNS_subject_alt_name }}.key"
|
|
owner: strongswan
|
|
group: "{{ root_group|default('root') }}"
|
|
mode: "0600"
|
|
notify:
|
|
- restart strongswan
|