Przeglądaj źródła

Self-signed cert files

Daniel Libonati 7 lat temu
rodzic
commit
b39df5d1a9
1 zmienionych plików z 12 dodań i 0 usunięć
  1. 12 0
      tools/playbook.yml

+ 12 - 0
tools/playbook.yml

@@ -190,6 +190,11 @@
         uris: "{{ uris }} --redirect_uri=https://{{ item }}.{{ lookup('env', 'CLIENT') }}.flowdat.com/login_check"
         uris: "{{ uris }} --redirect_uri=https://{{ item }}.{{ lookup('env', 'CLIENT') }}.flowdat.com/login_check"
       with_items: "{{ lookup('env', 'MODULES_INSTALL').split(',') }}"
       with_items: "{{ lookup('env', 'MODULES_INSTALL').split(',') }}"
 
 
+    - name: Load redirections app_dev
+      set_fact:
+        uris: "{{ uris }} --redirect_uri=https://{{ item }}.{{ lookup('env', 'CLIENT') }}.flowdat.com/app_dev.php/login_check"
+      with_items: "{{ lookup('env', 'MODULES_INSTALL').split(',') }}"
+
     - name: Create oauth client
     - name: Create oauth client
       shell: "bin/console oauth:client:createRedirects {{ uris }} > oauth.data.log"
       shell: "bin/console oauth:client:createRedirects {{ uris }} > oauth.data.log"
       args:
       args:
@@ -263,6 +268,13 @@
     - name: "Doctrine schema update"
     - name: "Doctrine schema update"
       shell: "bin/console doctrine:schema:update --force"
       shell: "bin/console doctrine:schema:update --force"
 
 
+  # Generate self-signed cert files for Nginx
+- name: "Make sure certs dir exists"
+  file: path=/opt/flowdat/extra/nginx/certs state=directory
+
+- name: "Generate self-signed certs for Nginx"
+  command: "openssl req -x509 -nodes -batch -days 365 -newkey rsa:2048 -keyout /opt/flowdat/extra/nginx/certs/privkey.pem -out /opt/flowdat/extra/nginx/certs/fullchain.pem"
+
 - name: "Run up all. Tag=up_all"
 - name: "Run up all. Tag=up_all"
   hosts: 127.0.0.1
   hosts: 127.0.0.1
   connection: local
   connection: local