Commit 3eccf2b5 authored by Administrator's avatar Administrator
Browse files

Update run.yml

parent 60ddc184

run.yml

+7 −16
Original line number Diff line number Diff line
@@ -27,22 +27,6 @@ 
  hosts: ipaserver:ipareplicas

  become: yes

  tasks:

    # - name: Comment cert in httpd config

    #   ansible.builtin.lineinfile:

    #     path: "/etc/httpd/conf.d/ssl.conf"

    #     state: present

    #     insertafter: "^<VirtualHost +_default_:443>$"

    #     # insertbefore: "^</VirtualHost>$"

    #     regexp: "^SSLCertificateFile +/var/lib/ipa/certs/httpd.crt$"

    #     line: "#SSLCertificateFile /var/lib/ipa/certs/httpd.crt"

    # - name: Comment key in httpd config

    #   ansible.builtin.lineinfile:

    #     path: "/etc/httpd/conf.d/ssl.conf"

    #     state: present

    #     insertafter: "^<VirtualHost +_default_:443>$"

    #     # insertbefore: "^</VirtualHost>$"

    #     regexp: "^SSLCertificateKeyFile +/var/lib/ipa/private/httpd.key$"

    #     line: "#SSLCertificateKeyFile /var/lib/ipa/private/httpd.key"

    - name: Put cert in httpd config

      ansible.builtin.lineinfile:

        path: "/etc/httpd/conf.d/ssl.conf"
@@ -52,6 +36,8 @@ 
        regexp: "^SSLCertificateFile .*"

        line: "SSLCertificateFile /opt/ssl/fullchain.pem"

        backup: yes

      notify:

        - Restart ipa

    - name: Put key in httpd config

      ansible.builtin.lineinfile:

        path: "/etc/httpd/conf.d/ssl.conf"
@@ -61,6 +47,11 @@ 
        regexp: "^SSLCertificateKeyFile .*"

        line: "SSLCertificateKeyFile /opt/ssl/privkey.pem"

        backup: yes

      notify:

        - Restart ipa

  handlers:

    - name: Restart ipa

      ansible.builtin.shell: ipactl restart



- name: Install ucarp with dependencies

  hosts: ipaserver:ipareplicas