blob: bac197361705ca8ca0b76fc0b33f635ce6dd9a7a (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
|
# Instance configuration for Baserock Trove server.
#
# This script expects a volume to be available at /dev/vdb.
---
- hosts: git
gather_facts: False
sudo: yes
tasks:
# To create the .pem file, simply concatenate
# certs/baserock.org-ssl-certificate-temporary-dsilverstone.full.cert with
# the private key for that certificate (which is not committed to Git, of
# course).
- name: Install SSL certificate
copy:
src: ../private/baserock.org-ssl-certificate-temporary-dsilverstone.pem
dest: /etc/trove/baserock.pem
mode: 400
- name: Install CA chain certificate
copy:
src: ../certs/startcom-class2-ca-chain-certificate.cert
dest: /etc/trove/startcom-ca.pem
- name: Install trove.conf configuration file
copy:
src: trove.conf
dest: /etc/trove/trove.conf
- name: Copy ssh keys
copy:
src: ../private/{{ item }}
dest: /etc/trove/{{ item }}
with_items:
- admin.key.pub
- lorry.key
- lorry.key.pub
- worker.key.pub
- name: Restart the trove-setp service to configure the trove
service:
name: trove-setup
state: restarted
|
