mirror of
https://git.lapiole.org/dani/ansible-roles.git
synced 2025-07-27 00:05:44 +02:00
Update to 2021-12-01 19:13
This commit is contained in:
19
roles/zabbix_proxy/tasks/psk.yml
Normal file
19
roles/zabbix_proxy/tasks/psk.yml
Normal file
@@ -0,0 +1,19 @@
|
||||
---
|
||||
- name: Check if a TLS PSK key exists
|
||||
stat: path=/etc/zabbix/zabbix_proxy.psk
|
||||
register: zbx_proxy_psk
|
||||
tags: zabbix
|
||||
|
||||
- name: Generate random PSK key for TLS encryption
|
||||
shell: "openssl rand -hex 32 > /etc/zabbix/zabbix_proxy.psk"
|
||||
when:
|
||||
- not zbx_proxy_psk.stat.exists
|
||||
- zabbix_proxy_encryption | default('none') == "psk"
|
||||
tags: zabbix
|
||||
|
||||
- name: Restrict permission on PSK file
|
||||
file: path=/etc/zabbix/zabbix_proxy.psk owner=root group=zabbix mode=0640
|
||||
when:
|
||||
- not zbx_proxy_psk.stat.exists
|
||||
- zabbix_proxy_encryption | default('none') == "psk"
|
||||
tags: zabbix
|
Reference in New Issue
Block a user