aboutsummaryrefslogtreecommitdiff
path: root/roles/webserver/tasks
diff options
context:
space:
mode:
authorJohannes Stoelp <johannes.stoelp@gmail.com>2024-08-28 23:51:26 +0200
committerJohannes Stoelp <johannes.stoelp@gmail.com>2024-08-28 23:51:26 +0200
commitb313368376d3c831b0347e171b2fd2a9da4a1eaf (patch)
tree6713fd16769930cac17a97c782d863b18301d523 /roles/webserver/tasks
parent812b0095a4c710a00d9ec0f5265dbbbc12a620ad (diff)
downloadansible-memzero-b313368376d3c831b0347e171b2fd2a9da4a1eaf.tar.gz
ansible-memzero-b313368376d3c831b0347e171b2fd2a9da4a1eaf.zip
nginx: persist ssl keys, add ssl key spec in one server block as the nginx docker image parses the information from that (not includes)HEADmain
Diffstat (limited to 'roles/webserver/tasks')
-rw-r--r--roles/webserver/tasks/main.yml1
1 files changed, 1 insertions, 0 deletions
diff --git a/roles/webserver/tasks/main.yml b/roles/webserver/tasks/main.yml
index 5e8be87..381ac21 100644
--- a/roles/webserver/tasks/main.yml
+++ b/roles/webserver/tasks/main.yml
@@ -28,6 +28,7 @@
# Use 'Z' to privately relable selinux contexts.
- "{{ DATA_ROOT }}/nginx/user_conf.d:/etc/nginx/user_conf.d:ro,Z"
- "{{ DATA_ROOT }}/nginx/inc:/etc/nginx/inc:ro,Z"
+ - "{{ DATA_ROOT }}/nginx/certs:/etc/letsencrypt:Z"
# Use 'z' to shared-ly relable selinux contexts.
- "{{ DATA_ROOT }}/nginx/www:/www:ro,z"