ansible-role-mail/tasks/tls.yml

27 lines
576 B
YAML
Raw Permalink Normal View History

2020-11-07 20:27:01 +01:00
---
# vim: set et sw=2 ts=2 sts=2:
2020-11-10 00:45:00 +01:00
- name: TLS directories
file:
state: directory
path: '{{item}}'
mode: 0755
owner: root
with_items:
- /etc/postfix/tls
- /etc/dovecot/tls
2020-11-07 20:27:01 +01:00
- name: DHs for Postfix
community.crypto.openssl_dhparam:
path: '/etc/postfix/tls/mail_{{item}}.dh'
size: '{{item}}'
2020-11-10 00:45:00 +01:00
owner: root
2020-11-07 20:27:01 +01:00
mode: 0400
with_items: [512,2048,4192]
- name: DHs for Dovecot
community.crypto.openssl_dhparam:
path: '/etc/dovecot/tls/mail_{{item}}.dh'
size: '{{item}}'
owner: dovecot
mode: 0400
with_items: [512,2048,4192]