|
|
|
|
|
|
|
|
|
|
|
|
|
|
{% set certificates_path = salt['pillar.get']('nginx:ng:certificates_path', '/etc/nginx/ssl') %} |
|
|
{% set certificates_path = salt['pillar.get']('nginx:ng:certificates_path', '/etc/nginx/ssl') %} |
|
|
|
|
|
|
|
|
{% if salt.pillar.get('nginx:ng:dh_contents') %} |
|
|
|
|
|
create_nginx_dhparam_key: |
|
|
|
|
|
|
|
|
{%- for dh_param, value in salt.pillar.get('nginx:ng:dh_param').items() %} |
|
|
|
|
|
{%- if value is string %} |
|
|
|
|
|
create_nginx_dhparam_{{ dh_param }}_key: |
|
|
file.managed: |
|
|
file.managed: |
|
|
- name: {{ certificates_path }}/dhparam.pem |
|
|
|
|
|
- contents_pillar: nginx:ng:dh_contents |
|
|
|
|
|
|
|
|
- name: {{ certificates_path }}/{{ dh_param }} |
|
|
|
|
|
- contents_pillar: nginx:ng:dh_param:{{ dh_param }} |
|
|
- makedirs: True |
|
|
- makedirs: True |
|
|
{% elif salt.pillar.get('nginx:ng:dh_keygen', False) %} |
|
|
|
|
|
generate_nginx_dhparam_key: |
|
|
|
|
|
|
|
|
{%- else %} |
|
|
|
|
|
generate_nginx_dhparam_{{ dh_param }}_key: |
|
|
pkg.installed: |
|
|
pkg.installed: |
|
|
- name: {{ nginx.lookup.openssl_package }} |
|
|
- name: {{ nginx.lookup.openssl_package }} |
|
|
file.directory: |
|
|
file.directory: |
|
|
- name: {{ certificates_path }} |
|
|
- name: {{ certificates_path }} |
|
|
- makedirs: True |
|
|
- makedirs: True |
|
|
cmd.run: |
|
|
cmd.run: |
|
|
- name: openssl dhparam -out dhparam.pem {{ salt.pillar.get('nginx:ng:dh_keysize', 2048) }} |
|
|
|
|
|
|
|
|
- name: openssl dhparam -out {{ dh_param }} {{ value.get('keysize', 2048) }} |
|
|
- cwd: {{ certificates_path }} |
|
|
- cwd: {{ certificates_path }} |
|
|
- creates: {{ certificates_path }}/dhparam.pem |
|
|
|
|
|
{% endif %} |
|
|
|
|
|
|
|
|
- creates: {{ certificates_path }}/{{ dh_param }} |
|
|
|
|
|
{%- endif %} |
|
|
|
|
|
{%- endfor %} |
|
|
|
|
|
|
|
|
{%- for domain in salt['pillar.get']('nginx:ng:certificates', {}).keys() %} |
|
|
{%- for domain in salt['pillar.get']('nginx:ng:certificates', {}).keys() %} |
|
|
|
|
|
|