Make CA runtime configurable (#9)

fixes #2
NETWAYS · Aug 16, 2021 · f4b05d1 · f4b05d1
1 parent a143c34
commit f4b05d1
Show file tree

Hide file tree

Showing 3 changed files with 6 additions and 1 deletion.
diff --git a/README.md b/README.md
@@ -7,3 +7,7 @@
 A simple role to create a CA to create certificates and deploy them to hosts.
 
 The intended use is to create certificates you can use for connecting clients to main systems.
+
+## Variables ##
+
+* `ca_ca_days`: Runtime of the CA certificate (default: `3650`)
diff --git a/defaults/main.yml b/defaults/main.yml
@@ -3,6 +3,7 @@
 ca_ca: false
 ca_manage_openssl: true
 ca_ca_dir: /opt/ca
+ca_ca_days: 3650
 ca_ca_password: ChangeMe
 
 ca_country: EX

diff --git a/tasks/ca.yml b/tasks/ca.yml
@@ -40,7 +40,7 @@
     -key {{ ca_ca_dir }}/ca.key
     -passin pass:{{ ca_ca_password }}
     -sha256
-    -days 3650
+    -days {{ ca_ca_days }}
     -out {{ ca_ca_dir }}/ca.crt
     -config {{ ca_ca_dir }}/ca.conf
   args: