mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-06 10:59:59 +00:00
kevinveenbirkenbachandClaude Opus 4.8
4039313266
Add tests/lint/repository/test_task_file_numbering.py: numbered task files use exactly two leading digits, a numbered *_core.yml must be 00_core.yml, per directory the numbers are unique/consecutive and start at 01 (00 with a core file), numbered includes appear in ascending order, and shared helpers live in tasks/utils/ instead of the numbered chain. Apply it across every role: rename NN_core.yml to 00_core.yml with a consecutive down-shift of the siblings, move letter-suffix children into a subdirectory named after their parent task, relocate helpers included from more than one place into tasks/utils/, and update every reference (include_tasks, path_absolute, .ansible-lint-ignore, requirement docs). Legacy narration comments in the touched files are deleted; the upstream xwiki.properties reference block opts out via nocheck. The unused MAILU_IP6_PUBLIC var (only ever named in now-removed comments) is dropped. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
61 lines
1.3 KiB
YAML
61 lines
1.3 KiB
YAML
---
|
|
- name: "🗑️ TLS | (self_signed) remove outdated cert/key/csr if SAN drift detected"
|
|
ansible.builtin.file:
|
|
path: "{{ item }}"
|
|
state: absent
|
|
loop:
|
|
- "{{ _ss_cert }}"
|
|
- "{{ _ss_key }}"
|
|
- "{{ _ss_csr }}"
|
|
|
|
- name: "⚙️ TLS | (self_signed) generate private key (if missing)"
|
|
ansible.builtin.command:
|
|
argv:
|
|
- openssl
|
|
- genrsa
|
|
- -out
|
|
- "{{ _ss_key }}"
|
|
- "{{ tls_selfsigned_key_bits | string }}"
|
|
args:
|
|
creates: "{{ _ss_key }}"
|
|
|
|
- name: "⚙️ TLS | (self_signed) generate CSR (SAN aware)"
|
|
ansible.builtin.command:
|
|
argv:
|
|
- openssl
|
|
- req
|
|
- -new
|
|
- -key
|
|
- "{{ _ss_key }}"
|
|
- -out
|
|
- "{{ _ss_csr }}"
|
|
- -config
|
|
- "{{ _ss_conf }}"
|
|
args:
|
|
creates: "{{ _ss_csr }}"
|
|
|
|
- name: "✒️ TLS | (self_signed) sign CSR with local Root CA (creates CA-signed leaf cert)"
|
|
ansible.builtin.command:
|
|
argv:
|
|
- openssl
|
|
- x509
|
|
- -req
|
|
- -in
|
|
- "{{ _ss_csr }}"
|
|
- -CA
|
|
- "{{ CA_ROOT.cert_host }}"
|
|
- -CAkey
|
|
- "{{ CA_ROOT.key_host }}"
|
|
- -CAcreateserial
|
|
- -out
|
|
- "{{ _ss_cert }}"
|
|
- -days
|
|
- "{{ tls_selfsigned_days | string }}"
|
|
- -sha256
|
|
- -extfile
|
|
- "{{ _ss_conf }}"
|
|
- -extensions
|
|
- req_ext
|
|
args:
|
|
creates: "{{ _ss_cert }}"
|