2026-01-14 11:03:59 +03:00
|
|
|
- name: Web Application Firewalls (config)
|
|
|
|
|
hosts: waf
|
|
|
|
|
vars_files:
|
|
|
|
|
- "vars/common.yml"
|
|
|
|
|
- "vars/secrets.yml"
|
|
|
|
|
vars:
|
2026-01-19 15:06:34 +03:00
|
|
|
local_ca_certs_ca_passphrase: "{{ secrets.ca.passphrase }}"
|
|
|
|
|
local_ca_certs_default_country_name: "{{ common.certificates.country_name }}"
|
|
|
|
|
local_ca_certs_default_locality_name: "{{ common.certificates.locality_name }}"
|
|
|
|
|
local_ca_certs_default_organization_name: "{{ common.certificates.organization_name }}"
|
|
|
|
|
local_ca_certs_default_email_address: "{{ common.certificates.email_address }}"
|
|
|
|
|
local_ca_certs_list:
|
2026-01-14 11:03:59 +03:00
|
|
|
- cn: "test.lab"
|
|
|
|
|
domains:
|
|
|
|
|
- "DNS:test.lab"
|
|
|
|
|
- "DNS:{{ ansible_fqdn }}"
|
|
|
|
|
- "DNS:{{ ansible_hostname }}"
|
|
|
|
|
- "IP:{{ ansible_default_ipv4.address }}"
|
2026-01-20 12:27:03 +03:00
|
|
|
caddy_config_only: true
|
2026-02-06 17:33:56 +03:00
|
|
|
caddy_consul: true
|
|
|
|
|
caddy_consul: true
|
|
|
|
|
caddy_consul_delegate_to: "waf1"
|
|
|
|
|
caddy_consul_admin_token: "{{ secrets.consul.bootstrap_secret }}"
|
|
|
|
|
caddy_consul_aes_key: "{{ secrets.caddy.storage_consul_aes_key }}"
|
2026-01-20 12:27:03 +03:00
|
|
|
caddy_sites: "{{ common.sites }}"
|
2026-01-14 11:03:59 +03:00
|
|
|
roles:
|
2026-01-19 21:00:14 +03:00
|
|
|
- "local_ca_certs"
|
2026-01-20 12:27:03 +03:00
|
|
|
- "caddy"
|
2026-01-14 11:03:59 +03:00
|
|
|
tags:
|
|
|
|
|
- "waf"
|
