- name: Web Application Firewalls (config)
  hosts: waf
  vars_files:
    - "vars/common.yml"
    - "vars/secrets.yml"
  vars:
    local_ca_certs_ca_passphrase: "{{ secrets.ca.passphrase }}"
    local_ca_certs_default_country_name: "{{ common.certificates.country_name }}"
    local_ca_certs_default_locality_name: "{{ common.certificates.locality_name }}"
    local_ca_certs_default_organization_name: "{{ common.certificates.organization_name }}"
    local_ca_certs_default_email_address: "{{ common.certificates.email_address }}"
    local_ca_certs_list:
      - cn: "test.lab"
        domains:
          - "DNS:test.lab"
          - "DNS:{{ ansible_fqdn }}"
          - "DNS:{{ ansible_hostname }}"
          - "IP:{{ ansible_default_ipv4.address }}"
    waf_config_sites: "{{ common.sites }}"
  roles:
    - "certs"
    - "waf_config"
  tags:
    - "waf"