WIP

example/ansible/play-config.yml

@@ -0,0 +1,25 @@
+- name: Web Application Firewalls (config)
+  hosts: waf
+  vars_files:
+    - "vars/common.yml"
+    - "vars/secrets.yml"
+  vars:
+    local_ca_certs_ca_passphrase: "{{ secrets.ca.passphrase }}"
+    local_ca_certs_default_country_name: "{{ common.certificates.country_name }}"
+    local_ca_certs_default_locality_name: "{{ common.certificates.locality_name }}"
+    local_ca_certs_default_organization_name: "{{ common.certificates.organization_name }}"
+    local_ca_certs_default_email_address: "{{ common.certificates.email_address }}"
+    local_ca_certs_list:
+      - cn: "test.lab"
+        domains:
+          - "DNS:test.lab"
+          - "DNS:{{ ansible_fqdn }}"
+          - "DNS:{{ ansible_hostname }}"
+          - "IP:{{ ansible_default_ipv4.address }}"
+    caddy_config_only: true
+    caddy_sites: "{{ common.sites }}"
+  roles:
+    - "local_ca_certs"
+    - "caddy"
+  tags:
+    - "waf"