adding files

1 files changed, 24 insertions, 0 deletions

diff --git a/playbooks/ssl.yaml b/playbooks/ssl.yaml
new file mode 100644
index 0000000..6b5e53d
--- /dev/null
+++ b/playbooks/ssl.yaml
@@ -0,0 +1,24 @@
+---
+- name: "Create self-signed SSL cert"
+  shell:
+    cmd: |
+      ssl_hostname="{{ ansible_nodename }}.{{ fqdn }}"
+      if [ ! -f "/etc/ssl/certs/${ssl_hostname}.crt" ] && [ ! -f "/etc/ssl/private/${ssl_hostname}.key" ]; then
+          openssl req -x509 -nodes -sha256 -days 3650 -newkey rsa:4096 -keyout "/tmp/${ssl_hostname}.key" -out "/tmp/${ssl_hostname}.crt" <<EOF
+      US
+      New Jersey
+      Basking Ridge
+      Verizon Wireless
+      Verizon Cloud Platform
+      ${ssl_hostname}
+      carlos.konstanski@verizonwireless.com
+      EOF
+          cp -f "/tmp/${ssl_hostname}.crt" "/etc/ssl/certs/"
+          cp -f "/tmp/${ssl_hostname}.key" "/etc/ssl/private/"
+          chmod 644 "/etc/ssl/certs/${ssl_hostname}.crt"
+          chown root: "/etc/ssl/certs/${ssl_hostname}.crt"
+          chmod 640 "/etc/ssl/private/${ssl_hostname}.key"
+          chown root:ssl-cert "/etc/ssl/private/${ssl_hostname}.key"
+      fi
+  args:
+    executable: /bin/bash