diff --git a/defaults/main.yml b/defaults/main.yml index 5fe2ca2..2344d35 100644 --- a/defaults/main.yml +++ b/defaults/main.yml @@ -3,6 +3,9 @@ # Defaults variables for OpenLDAP role ################################################################################ +# Deploy certificate +ldaptoolbox_openldap_deploy_certificates: false + # apt package repository ldaptoolbox_openldap_apt_key_url: "https://ltb-project.org/documentation/_static/RPM-GPG-KEY-LTB-project" diff --git a/playbook/multimaster.yml b/playbook/multimaster.yml index 36e6ef9..b4fb914 100644 --- a/playbook/multimaster.yml +++ b/playbook/multimaster.yml @@ -13,6 +13,8 @@ # include extra schema - ldaptoolbox_openldap_custom_schema_srcdir: "{{ playbook_dir }}/files/ldaptoolbox.oldap/usr/local/openldap/etc/openldap/schema" - ldaptoolbox_openldap_custom_schema_list: [ custom.ldif ] + # Deploy certificates + - ldaptoolbox_openldap_deploy_certificates: true - ldaptoolbox_openldap_olcTLSCACertificateFile: "{{ '/usr/local/openldap/etc/openldap/certs/ca.crt' }}" - ldaptoolbox_openldap_olcTLSCertificateFile: "{{ '/usr/local/openldap/etc/openldap/certs/openldap.crt' }}" - ldaptoolbox_openldap_olcTLSCertificateKeyFile: "{{ '/usr/local/openldap/etc/openldap/certs/openldap.key' }}" diff --git a/playbook/standalone.yml b/playbook/standalone.yml index 9ead3c6..269f2c8 100644 --- a/playbook/standalone.yml +++ b/playbook/standalone.yml @@ -14,6 +14,7 @@ - ldaptoolbox_openldap_custom_schema_srcdir: "{{ playbook_dir }}/files/ldaptoolbox.oldap/usr/local/openldap/etc/openldap/schema" - ldaptoolbox_openldap_custom_schema_list: [ custom.ldif ] # deploy certificates + - ldaptoolbox_openldap_deploy_certificates: true - ldaptoolbox_openldap_olcTLSCACertificateFile: "{{ '/usr/local/openldap/etc/openldap/certs/ca.crt' }}" - ldaptoolbox_openldap_olcTLSCertificateFile: "{{ '/usr/local/openldap/etc/openldap/certs/openldap.crt' }}" - ldaptoolbox_openldap_olcTLSCertificateKeyFile: "{{ '/usr/local/openldap/etc/openldap/certs/openldap.key' }}" diff --git a/tasks/main.yml b/tasks/main.yml index 74c5170..7760d47 100644 --- a/tasks/main.yml +++ b/tasks/main.yml @@ -21,6 +21,7 @@ - name: setup certificates include_tasks: ldaptoolbox-certificates.yml + when: ldaptoolbox_openldap_deploy_certificates|bool == true # Configuration # -------------