ansible-roles/openldap-server/tasks/openldap-letsencrypt.yml

---
- name: Install a script that fix the letsencrypt certificates for openldap and then reload the service
  copy: src=openldap-letsencrypt-acme.sh dest={{ letsencrypt_acme_services_scripts_dir }}/openldap owner=root group=root mode=4555
  when:
    - openldap_letsencrypt_managed
    - letsencrypt_acme_install
  register: openldap_letsencrypt_hook
  tags: [ 'ldap_server', 'ldap', 'ldap_conf', 'letsencrypt' ]

- name: Copy the SSL ldif on the ldap server
  copy: src=olcSSL.ldif dest=/etc/ldap/schema/olcSSL.ldif
  when:
    - openldap_letsencrypt_managed
    - letsencrypt_acme_install
  tags: [ 'ldap_server', 'ldap', 'ldap_conf', 'letsencrypt' ]

- name: Run the letsencrypt hook una tantum to create the correct environment
  shell: '{{ letsencrypt_acme_services_scripts_dir }}/openldap'
  when: openldap_letsencrypt_hook is changed
  tags: [ 'ldap_server', 'ldap', 'ldap_conf', 'letsencrypt' ]

- name: Enable the openldap ssl configuration
  shell: ldapmodify -Q -Y EXTERNAL -H ldapi:/// -f /etc/ldap/schema/olcSSL.ldif ; touch /etc/ldap/schema/.olcSSL.ldif.installed
  args:
    creates: /etc/ldap/schema/.olcSSL.ldif.installed
  notify: Restart openldap 
  when:
    - openldap_letsencrypt_managed
    - letsencrypt_acme_install
  tags: [ 'ldap_server', 'ldap', 'ldap_conf', 'letsencrypt' ]
library/roles/openldap-server: Support for ssl when letsencrypt is enabled using the letsencrypt-acme-tool role. 2016-04-15 20:33:23 +02:00			`---`
			`- name: Install a script that fix the letsencrypt certificates for openldap and then reload the service`
d4science-infrastructure/group_vars/ldap_liferay/all.yml: Enable ssl with the use of letsencrypt certificates. library/roles/haproxy/files: Fix to the acme scripts, the certificate path has become /etc/pki/haproxy/haproxy.pem. library/roles/openldap-server/tasks/openldap_initializazion.yml: Fix the certificates initialization. library/roles/ubuntu-deb-general/tasks/pki-basics.yml: Create a self signed certificate while waiting the letsencrypt one. 2016-04-20 15:21:19 +02:00			`copy: src=openldap-letsencrypt-acme.sh dest={{ letsencrypt_acme_services_scripts_dir }}/openldap owner=root group=root mode=4555`
library/roles/openldap-server: Support for ssl when letsencrypt is enabled using the letsencrypt-acme-tool role. 2016-04-15 20:33:23 +02:00			`when:`
			`- openldap_letsencrypt_managed`
			`- letsencrypt_acme_install`
Fix the letsencrypt hook for openldap 2018-03-01 18:07:57 +01:00			`register: openldap_letsencrypt_hook`
library/roles/openldap-server: Support for ssl when letsencrypt is enabled using the letsencrypt-acme-tool role. 2016-04-15 20:33:23 +02:00			`tags: [ 'ldap_server', 'ldap', 'ldap_conf', 'letsencrypt' ]`

			`- name: Copy the SSL ldif on the ldap server`
Fix the letsencrypt hook for openldap 2018-03-01 18:07:57 +01:00			`copy: src=olcSSL.ldif dest=/etc/ldap/schema/olcSSL.ldif`
library/roles/openldap-server: Support for ssl when letsencrypt is enabled using the letsencrypt-acme-tool role. 2016-04-15 20:33:23 +02:00			`when:`
			`- openldap_letsencrypt_managed`
			`- letsencrypt_acme_install`
			`tags: [ 'ldap_server', 'ldap', 'ldap_conf', 'letsencrypt' ]`

Fix the letsencrypt hook for openldap 2018-03-01 18:07:57 +01:00			`- name: Run the letsencrypt hook una tantum to create the correct environment`
			`shell: '{{ letsencrypt_acme_services_scripts_dir }}/openldap'`
			`when: openldap_letsencrypt_hook is changed`
			`tags: [ 'ldap_server', 'ldap', 'ldap_conf', 'letsencrypt' ]`

library/roles/openldap-server: Support for ssl when letsencrypt is enabled using the letsencrypt-acme-tool role. 2016-04-15 20:33:23 +02:00			`- name: Enable the openldap ssl configuration`
Fix the letsencrypt hook for openldap 2018-03-01 18:07:57 +01:00			`shell: ldapmodify -Q -Y EXTERNAL -H ldapi:/// -f /etc/ldap/schema/olcSSL.ldif ; touch /etc/ldap/schema/.olcSSL.ldif.installed`
library/roles/openldap-server: Support for ssl when letsencrypt is enabled using the letsencrypt-acme-tool role. 2016-04-15 20:33:23 +02:00			`args:`
Fix the letsencrypt hook for openldap 2018-03-01 18:07:57 +01:00			`creates: /etc/ldap/schema/.olcSSL.ldif.installed`
library/roles/openldap-server: Support for ssl when letsencrypt is enabled using the letsencrypt-acme-tool role. 2016-04-15 20:33:23 +02:00			`notify: Restart openldap`
d4science-infrastructure/group_vars/ldap_liferay/all.yml: Enable ssl with the use of letsencrypt certificates. library/roles/haproxy/files: Fix to the acme scripts, the certificate path has become /etc/pki/haproxy/haproxy.pem. library/roles/openldap-server/tasks/openldap_initializazion.yml: Fix the certificates initialization. library/roles/ubuntu-deb-general/tasks/pki-basics.yml: Create a self signed certificate while waiting the letsencrypt one. 2016-04-20 15:21:19 +02:00			`when:`
			`- openldap_letsencrypt_managed`
			`- letsencrypt_acme_install`
library/roles/openldap-server: Support for ssl when letsencrypt is enabled using the letsencrypt-acme-tool role. 2016-04-15 20:33:23 +02:00			`tags: [ 'ldap_server', 'ldap', 'ldap_conf', 'letsencrypt' ]`