Playbook for installation of new certificates

molgenis

@@ -0,0 +1,81 @@
+molgenis[01:99]
+molgenis[100:110]
+
+[molgenis1-70]
+molgenis[01:70]
+
+[no-httpd]
+molgenis02
+molgenis07
+molgenis11
+molgenis15
+molgenis23
+molgenis24
+molgenis25
+molgenis28
+molgenis30
+molgenis32
+molgenis33
+molgenis36
+molgenis37
+molgenis38
+molgenis39
+molgenis40
+molgenis42
+molgenis43
+molgenis44
+molgenis45
+molgenis46
+molgenis47
+molgenis48
+molgenis49
+molgenis54
+molgenis57
+molgenis59
+molgenis61
+molgenis64
+molgenis65
+molgenis69
+molgenis70
+
+[localhost-certfile]
+molgenis03
+molgenis06
+molgenis04
+molgenis05
+molgenis09
+molgenis12
+molgenis13
+molgenis17
+molgenis16
+molgenis19
+molgenis20
+molgenis26
+molgenis21
+molgenis41
+molgenis51
+molgenis50
+molgenis52
+molgenis53
+molgenis56
+molgenis58
+molgenis68
+molgenis18
+molgenis55
+molgenis60
+molgenis66
+molgenis67
+
+[fqdn-certfile]
+molgenis01
+molgenis10
+molgenis14
+molgenis22
+molgenis08
+molgenis31
+molgenis27
+molgenis29
+molgenis34
+molgenis35
+molgenis62
+molgenis63

molgenis_cert.yml

@@ -0,0 +1,23 @@
+---
+- hosts: fqdn-certfile
+  become: false
+  tasks:
+    - copy:
+        src: newcertsmolgenis/{{ ansible_hostname }}_gcc_rug_nl.crt
+        dest: /etc/pki/tls/certs/{{ ansible_hostname }}_gcc_rug_nl/{{ ansible_hostname }}_gcc_rug_nl.crt
+        backup: yes
+    - copy:
+        src: newcertsmolgenis/rsa.{{ ansible_hostname }}.gcc.rug.nl.key
+        dest: /etc/pki/tls/private/{{ ansible_hostname }}_gcc_rug_nl/{{ ansible_hostname }}_gcc_rug_nl.key
+        backup: yes
+- hosts: localhost-certfile
+  become: true
+  tasks:
+    - copy:
+        src: newcertsmolgenis/{{ ansible_hostname }}_gcc_rug_nl.crt
+        dest: /etc/pki/tls/certs/localhost.crt
+        backup: yes
+    - copy:
+        src: newcertsmolgenis/rsa.{{ ansible_hostname }}.gcc.rug.nl.key
+        dest: /etc/pki/tls/private/localhost.key
+        backup: yes

roles/stealth/tasks/main.yml

@@ -1,16 +0,0 @@
----
-
-- user:
-    name: kees
-    comment: "Kees Visser"
-    group: admin
-
-- authorized_key:
-    user: kees
-    key: 'ssh-dss AAAAB3NzaC1kc3MAAACBALg7GbHKk2jYPNXUgW69AKKnCALjroTtwCA0bt4zde1mavYNoQK8JY/pe4BSOQtsyo3JECYzmAZwoNbq8nJCh8ORf5tKs8njEykZ0n7BVWtCT/jh9EFPTFhFK864TdFVCvwtIafAL4kEVNvJ0wrJYa1mN/ds03HWliv+3Shj6x0dAAAAFQDxlwgId3zlrXiCfk3ciAHN5b2ScwAAAIEArZ3/Hg7FECh5Fjf7lnBQZW7sjG5OLZRJIZlj2/jYnvIRUrsN2XmebwO4Q5q7g7FLWlfbg+x2Lmv1OWf/zGd3U6aAx8M+d+nTWDtWpQNvcE99HlfOs9Q4Rzxx6ZOyaZn57lCva/nCmLe0DTPVB8rvocMmqe1r3n7/KgxxKttbWRUAAACAfH2y4JPt2AcVdHnHiibpQBtxK/9m6AEjsB/g02tMXHZletMs9jF6kGynan7xJqRqvWxkGS1ClHIUdt2uK6A6pbqOf2BwcBIxAdljLRrZOyvmW9KTqduHMemYv6xQnpNGb8moWq5V5FKiATvd/LB46O1zwZejJErfj70LRE98Hv4= stealth@operator'
-    state: present
-
-- name: unpack stealth tarrball.
-  unarchive:
-    src: files/stealth-linux.tar
-    dest: /home/kees

stealth.yml

@@ -1,5 +0,0 @@
----
-- hosts: all
-  become: True
-  roles:
-     - stealth

users.yml

@@ -51,16 +51,6 @@
         key: 'ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEArQsJ0g/a5YOHlk7xcMpHNxiN+up4syzLZfgiICECET/SCDXUN4Xh3BlSWng8hMQMD5sNSADF4AghdLKfuqXG1MMSvzGSVTcRwiZ+Hq6YCoiinpQw0qu7LOZVZeoG8f7sGwhBqe0wKeyPe6Q7nRe0CXvM+aU4XfZz18O/d3mU1S7cEiue02MgH6ff6VTJFqOtLGpL1rILJn3t58N+2CCWxJwGplkp7hRJ9TnhQqCO+PN/p/4neusjembRu5lX+AKX1mv91WYURkxfLE3CWe9V9YJVG0lLgfXDMyghqkTwf8UsMHS5FBy8oTvuC55EhX+xm2Peo1lZlzy7t5Hg2fWYFQ== h.meijering@rug.nl'
         state: present
 
-    - user:
-        name: Kees
-        comment: "Kees Visser"
-        group: admin
-
-    - authorized_key:
-        user: kees
-        key: 'ssh-dss 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 stealth@operator'
-        state: present
-
     - user:
         name: alex
         comment: "Alex Pothaar"