flyingscorpio/self-hosting
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

Include role to deplay certificate for mail

Browse source
This commit is contained in:
flyingscorpio@clevo 2023-01-26 09:00:54 +01:00
parent 93ee736c80
commit 60a83ad9a3
2 changed files with 8 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
roles/mail/tasks/main.yml
View file

@ -13,3 +13,9 @@
owner: root owner: root
group: root group: root
mode: 0644 mode: 0644
- name: Deploy letsencrypt certificate
ansible.builtin.include_role:
name: deploy_certificate
vars:
domain: mail.{{ mail_domain }}

4
roles/mail/templates/main.cf.j2
View file

@ -11,8 +11,8 @@ readme_directory = no
compatibility_level = 2 compatibility_level = 2
# TLS parameters # TLS parameters
smtpd_tls_cert_file=/etc/ssl/certs/ssl-cert-snakeoil.pem smtpd_tls_cert_file=/etc/letsencrypt/live/mail.{{ mail_domain }}/fullchain.pem
smtpd_tls_key_file=/etc/ssl/private/ssl-cert-snakeoil.key smtpd_tls_key_file=/etc/letsencrypt/live/mail.{{ mail_domain }}/privkey.pem
smtpd_tls_security_level=may smtpd_tls_security_level=may
smtp_tls_CApath=/etc/ssl/certs smtp_tls_CApath=/etc/ssl/certs