Enable SELinux deployment in dev config

This commit is contained in:
2026-02-24 00:18:34 -05:00
parent 2bd80bcfed
commit 929d549217
4 changed files with 138 additions and 26 deletions

View File

@@ -10,18 +10,17 @@
state: started
enabled: true
- name: Check for cached dhparams.pem file
- name: Check if environment is vagrant
ansible.builtin.stat:
path: "{{ proxy_cached_dhparams_pem }}"
register: dhparams_file
path: /home/vagrant
register: vagrant_home
- name: Copy cached dhparams.pem to /etc/ssl/
ansible.builtin.copy:
src: "{{ proxy_cached_dhparams_pem }}"
- name: Download Mozilla's standard DH params (dev only)
ansible.builtin.get_url:
url: https://ssl-config.mozilla.org/ffdhe4096.txt
dest: /etc/ssl/dhparams.pem
mode: "600"
remote_src: true
when: dhparams_file.stat.exists
when: vagrant_home.stat.exists
- name: Generate DH Parameters
community.crypto.openssl_dhparam: