mirror of
https://github.com/rubenhensen/k8scd.git
synced 2026-09-17 02:12:55 +02:00
Ruben Hensen
74 lines
2.1 KiB
YAML
74 lines
2.1 KiB
YAML
---
|
|
- name: Initialize Stalwart
|
|
ansible.builtin.command:
|
|
cmd: "{{ stalwart_executable_path }} --init {{ stalwart_install_path }}"
|
|
creates: "{{ stalwart_config_file_path }}"
|
|
become: true
|
|
become_user: "{{ stalwart_system_user }}"
|
|
|
|
- name: Deploy configuration
|
|
ansible.builtin.template:
|
|
src: "config.toml.j2"
|
|
dest: "{{ stalwart_config_file_path }}"
|
|
owner: "{{ stalwart_system_user }}"
|
|
group: "{{ stalwart_system_group }}"
|
|
mode: "0640"
|
|
notify: restart stalwart
|
|
|
|
- name: Ensure service is in correct state
|
|
ansible.builtin.service:
|
|
name: "{{ stalwart_service_name }}"
|
|
state: "{{ stalwart_service_state }}"
|
|
enabled: "{{ stalwart_service_enabled }}"
|
|
|
|
- name: Flush handlers to ensure Stalwart is running
|
|
ansible.builtin.meta: flush_handlers
|
|
|
|
- name: Wait for Stalwart API
|
|
ansible.builtin.wait_for:
|
|
port: 8080
|
|
host: 127.0.0.1
|
|
delay: 2
|
|
timeout: 30
|
|
|
|
- name: Read TLS certificate
|
|
ansible.builtin.slurp:
|
|
src: "{{ stalwart_tls_cert }}"
|
|
register: tls_cert_content
|
|
|
|
- name: Read TLS private key
|
|
ansible.builtin.slurp:
|
|
src: "{{ stalwart_tls_key }}"
|
|
register: tls_key_content
|
|
|
|
- name: Push TLS certificate to Stalwart
|
|
ansible.builtin.uri:
|
|
url: "http://127.0.0.1:8080/api/settings"
|
|
method: POST
|
|
user: "{{ stalwart_fallback_admin_login }}"
|
|
password: "{{ stalwart_fallback_admin_password }}"
|
|
force_basic_auth: true
|
|
body_format: json
|
|
body:
|
|
- type: "insert"
|
|
assert_empty: false
|
|
values:
|
|
- - "certificate.default.cert"
|
|
- "{{ tls_cert_content.content | b64decode }}"
|
|
- - "certificate.default.private-key"
|
|
- "{{ tls_key_content.content | b64decode }}"
|
|
- - "certificate.default.default"
|
|
- "true"
|
|
- - "server.tls.certificate"
|
|
- "default"
|
|
status_code: [200, 204]
|
|
|
|
- name: Reload Stalwart to apply certificate
|
|
ansible.builtin.uri:
|
|
url: "http://127.0.0.1:8080/api/reload"
|
|
method: GET
|
|
user: "{{ stalwart_fallback_admin_login }}"
|
|
password: "{{ stalwart_fallback_admin_password }}"
|
|
force_basic_auth: true
|
|
status_code: [200, 204]
|