diff --git a/roles/wsgi_website/tasks/main.yml b/roles/wsgi_website/tasks/main.yml index 244d9d92006ce63a9056fb05030480276e91fa6d..2490dbca64dc32e7d688541238057e658f477a9f 100644 --- a/roles/wsgi_website/tasks/main.yml +++ b/roles/wsgi_website/tasks/main.yml @@ -81,6 +81,18 @@ file: path="{{ home }}/htdocs/" state=directory owner="{{ admin }}" group="{{ user }}" mode="2750" +- name: Deploy nginx TLS private key for website + copy: dest="/etc/ssl/private/{{ https_tls_key | basename }}" src="{{ https_tls_key }}" + mode=640 owner=root group=root + notify: + - Restart nginx + +- name: Deploy nginx TLS certificate for website + copy: dest="/etc/ssl/certs/{{ https_tls_certificate | basename }}" src="{{ https_tls_certificate }}" + mode=644 owner=root group=root + notify: + - Restart nginx + - name: Deploy nginx configuration file for website template: src="nginx_site.j2" dest="/etc/nginx/sites-available/{{ fqdn }}" owner=root group=root mode=640 validate="/usr/local/bin/nginx_verify_site.sh -n '{{ fqdn }}' %s"