matrix-docker-ansible-deploy/roles/matrix-nginx-proxy/tasks/ssl/setup_ssl_self_signed.yml

---

- ansible.builtin.import_tasks: "{{ role_path }}/../matrix-base/tasks/util/ensure_openssl_installed.yml"
  when: "matrix_ssl_retrieval_method == 'self-signed'"

- name: Generate self-signed certificates
  ansible.builtin.include_tasks: "{{ role_path }}/tasks/ssl/setup_ssl_self_signed_obtain_for_domain.yml"
  with_items: "{{ matrix_ssl_domains_to_obtain_certificates_for }}"
  loop_control:
    loop_var: domain_name
  when: "matrix_ssl_retrieval_method == 'self-signed'"
Add support for 2 more SSL certificate retrieval methods Adds support for managing certificates manually and for having the playbook generate self-signed certificates for you. With this, Let's Encrypt usage is no longer required. Fixes Github issue #50. 2018-12-23 11:00:12 +02:00			`---`

More ansible-lint fixes 2022-07-18 11:22:05 +03:00			`- ansible.builtin.import_tasks: "{{ role_path }}/../matrix-base/tasks/util/ensure_openssl_installed.yml"`
only enable openssl if necessary 2022-01-19 21:58:39 -08:00			`when: "matrix_ssl_retrieval_method == 'self-signed'"`
Added basic changes to make it compatible with Archlinux 2020-03-28 11:39:15 +01:00
Make "obtain certificates" tasks have unique names We always skip at least one of these tasks, depending on which SSL retrieval method is enabled, so it could have been confusing why. 2018-12-24 09:39:27 +02:00			`- name: Generate self-signed certificates`
More ansible-lint fixes 2022-07-18 11:22:05 +03:00			`ansible.builtin.include_tasks: "{{ role_path }}/tasks/ssl/setup_ssl_self_signed_obtain_for_domain.yml"`
Make roles more independent of one another With this change, the following roles are now only dependent on the minimal `matrix-base` role: - `matrix-corporal` - `matrix-coturn` - `matrix-mailer` - `matrix-mxisd` - `matrix-postgres` - `matrix-riot-web` - `matrix-synapse` The `matrix-nginx-proxy` role still does too much and remains dependent on the others. Wiring up the various (now-independent) roles happens via a glue variables file (`group_vars/matrix-servers`). It's triggered for all hosts in the `matrix-servers` group. According to Ansible's rules of priority, we have the following chain of inclusion/overriding now: - role defaults (mostly empty or good for independent usage) - playbook glue variables (`group_vars/matrix-servers`) - inventory host variables (`inventory/host_vars/matrix.<your-domain>`) All roles default to enabling their main component (e.g. `matrix_mxisd_enabled: true`, `matrix_riot_web_enabled: true`). Reasoning: if a role is included in a playbook (especially separately, in another playbook), it should "work" by default. Our playbook disables some of those if they are not generally useful (e.g. `matrix_corporal_enabled: false`). 2019-01-16 18:05:48 +02:00			`with_items: "{{ matrix_ssl_domains_to_obtain_certificates_for }}"`
Add support for 2 more SSL certificate retrieval methods Adds support for managing certificates manually and for having the playbook generate self-signed certificates for you. With this, Let's Encrypt usage is no longer required. Fixes Github issue #50. 2018-12-23 11:00:12 +02:00			`loop_control:`
			`loop_var: domain_name`
			`when: "matrix_ssl_retrieval_method == 'self-signed'"`