ISTI-ansible-roles
/
ansible-role-vsftpd
5
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Make 'require_ssl_reuse' an option.

This commit is contained in:
Andrea Dell'Amico 2020-12-11 11:29:10 +01:00
parent 2dee92f748
commit de799c3b80
2 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
defaults/main.yml
View File

@ -30,6 +30,7 @@ vsftpd_valid_shell: '/bin/true'
vsftpd_tls_enabled: True vsftpd_tls_enabled: True
vsftpd_force_tls: True vsftpd_force_tls: True
vsftpd_require_ssl_reuse: "YES"
vsftpd_tls_letsencrypt: True vsftpd_tls_letsencrypt: True
vsftpd_ssl_ca_certificate: '{{ letsencrypt_acme_certs_dir }}/fullchain' vsftpd_ssl_ca_certificate: '{{ letsencrypt_acme_certs_dir }}/fullchain'
vsftpd_ssl_certificate: '{{ letsencrypt_acme_certs_dir }}/cert' vsftpd_ssl_certificate: '{{ letsencrypt_acme_certs_dir }}/cert'

5
templates/vsftpd.conf.j2
View File

@ -139,6 +139,11 @@ rsa_private_key_file={{ vsftpd_ssl_certificate_key }}
{% if vsftpd_force_tls %} {% if vsftpd_force_tls %}
force_local_logins_ssl=YES force_local_logins_ssl=YES
force_local_data_ssl=YES force_local_data_ssl=YES
{% else %}
force_local_logins_ssl=NO
force_local_data_ssl=NO
{% endif %}
require_ssl_reuse={{ vsftpd_require_ssl_reuse }}
{% endif %} {% endif %}
{% else %} {% else %}
# This option specifies the location of the RSA certificate to use for SSL # This option specifies the location of the RSA certificate to use for SSL