Browse Source

Add group name ssl-cert for SSL certificates

Ndubisi Nwaku 7 years ago
parent
commit
55770977da
2 changed files with 9 additions and 1 deletions
  1. 4
    1
      README.md
  2. 5
    0
      roles/common/tasks/letsencrypt.yml

+ 4
- 1
README.md View File

67
 
67
 
68
 The following steps are done on the remote server by `ssh`ing into it and running these commands.
68
 The following steps are done on the remote server by `ssh`ing into it and running these commands.
69
 
69
 
70
-### 1. Install required packages
70
+### 1. Install required packages e.g `aptitude` is required on Debian
71
 
71
 
72
     apt-get install sudo
72
     apt-get install sudo
73
 
73
 
115
 Modify the settings in the `group_vars/sovereign` folder to your liking. If you want to see how they’re used in context, just search for the corresponding string.
115
 Modify the settings in the `group_vars/sovereign` folder to your liking. If you want to see how they’re used in context, just search for the corresponding string.
116
 All of the variables in `group_vars/sovereign` must be set for sovereign to function.
116
 All of the variables in `group_vars/sovereign` must be set for sovereign to function.
117
 
117
 
118
+- Mail
118
 Setting `password_hash` for your mail users is a bit tricky. You can generate one using [doveadm-pw](http://wiki2.dovecot.org/Tools/Doveadm/Pw).
119
 Setting `password_hash` for your mail users is a bit tricky. You can generate one using [doveadm-pw](http://wiki2.dovecot.org/Tools/Doveadm/Pw).
119
 
120
 
120
     # doveadm pw -p'YOUR_PASSWORD' -s SHA512-CRYPT | sed -e 's/{.*}//'
121
     # doveadm pw -p'YOUR_PASSWORD' -s SHA512-CRYPT | sed -e 's/{.*}//'
130
 
131
 
131
     python -c 'import passlib.hash; print(passlib.hash.sha512_crypt.encrypt("password", rounds=5000))'
132
     python -c 'import passlib.hash; print(passlib.hash.sha512_crypt.encrypt("password", rounds=5000))'
132
 
133
 
134
+- ZNC
133
 Same for the IRC password hash…
135
 Same for the IRC password hash…
134
 
136
 
135
     # znc --makepass
137
     # znc --makepass
155
 
157
 
156
     python -c 'import passlib.hash; print("irc_password_salt: {}\nirc_password_hash: {}".format(*passlib.hash.sha256_crypt.encrypt("password", rounds=5000).split("$")[2:]))'
158
     python -c 'import passlib.hash; print("irc_password_salt: {}\nirc_password_hash: {}".format(*passlib.hash.sha256_crypt.encrypt("password", rounds=5000).split("$")[2:]))'
157
 
159
 
160
+- Git
158
 For Git hosting, copy your public key into place:
161
 For Git hosting, copy your public key into place:
159
 
162
 
160
 	cp ~/.ssh/id_rsa.pub roles/git/files/gitolite.pub
163
 	cp ~/.ssh/id_rsa.pub roles/git/files/gitolite.pub

+ 5
- 0
roles/common/tasks/letsencrypt.yml View File

1
+- name: Add group name ssl-cert for SSL certificates
2
+  group:
3
+    name: ssl-cert
4
+    state: present
5
+
1
 - name: Download LetsEncrypt release
6
 - name: Download LetsEncrypt release
2
   git: repo=https://github.com/letsencrypt/letsencrypt
7
   git: repo=https://github.com/letsencrypt/letsencrypt
3
        dest=/root/letsencrypt
8
        dest=/root/letsencrypt

Loading…
Cancel
Save