jpp/ansible-roles
1
0
Fork 0
mirror of https://git.lapiole.org/dani/ansible-roles.git synced 2025-07-27 00:05:44 +02:00
Code Issues Packages Projects Releases Wiki Activity

Update to 2022-09-02 10:00

Browse Source
This commit is contained in:
Daniel Berteaud
2022-09-02 10:00:20 +02:00
parent c6ecd988cf
commit 67bfcd5db3
12 changed files with 73 additions and 25 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
roles/vault/templates/dehydrated_hook.j2
View File

@@ -4,7 +4,7 @@ set -eo pipefail
{% if vault_letsencrypt_cert is defined %}
if [ $1 == "{{ pg_letsencrypt_cert }}" ]; then
if [ $1 == "{{ vault_letsencrypt_cert }}" ]; then
cp /var/lib/dehydrated/certificates/certs/{{ vault_letsencrypt_cert }}/fullchain.pem {{ vault_root_dir }}/tls/vault.crt
cp /var/lib/dehydrated/certificates/certs/{{ vault_letsencrypt_cert }}/privkey.pem {{ vault_root_dir }}/tls/vault.key
chown root:vault {{ vault_root_dir }}/tls/vault.key

8
roles/vault/templates/logrotate.conf.j2 Normal file
View File

@@ -0,0 +1,8 @@
{{ vault_root_dir }}/log/*.log {{ vault_root_dir }}/log/*.json {
daily
rotate 365
compress
missingok
copytruncate
su {{ vault_user }} {{ vault_user }}
}

6
roles/vault/templates/vault.hcl.j2
View File

@@ -51,11 +51,7 @@ service_registration "consul" {
{% endif %}
{% endfor %}
{% if vault_conf.service_registration.service_tags is defined %}
service_tags = [
{% for tag in vault_conf.service_registration.service_tags %}
"{{ tag }}",
{% endfor %}
]
service_tags = "{{ vault_conf.service_registration.service_tags | join(',') }}"
{% endif %}
}
{% endif %}