[PATCH] Refactor the copy of keys and certs for unbound

[misc@xxxxxxxx]

From: Michael Scherer <misc@xxxxxxxx>

Also restart the server if the key is changed, and tags the task
---
 roles/unbound/tasks/main.yml | 22 +++++++++++-----------
 1 file changed, 11 insertions(+), 11 deletions(-)

diff --git a/roles/unbound/tasks/main.yml b/roles/unbound/tasks/main.yml
index ef32ab2..a25e14c 100644
--- a/roles/unbound/tasks/main.yml
+++ b/roles/unbound/tasks/main.yml
@@ -24,17 +24,17 @@
   notify:
   - semanage dns8953
 
-- name: copying unbound control key
-  copy: src="{{ private }}/files/unbound/unbound_control.key" dest=/etc/unbound/unbound_control.key owner=root group=unbound mode=640
-
-- name: copying unbound control pem
-  copy: src="{{ private }}/files/unbound/unbound_control.pem" dest=/etc/unbound/unbound_control.pem owner=root group=unbound mode=640
-
-- name: copying unbound server key
-  copy: src="{{ private }}/files/unbound/unbound_server.key" dest=/etc/unbound/unbound_server.key owner=root group=unbound mode=640
-
-- name: copying unbound server pem
-  copy: src="{{ private }}/files/unbound/unbound_server.pem" dest=/etc/unbound/unbound_server.pem owner=root group=unbound mode=640
+- name: copying unbound keys and certs
+  copy: src="{{ private }}/files/unbound/unbound_{{ item }}" dest=/etc/unbound/unbound_{{ item }} owner=root group=unbound mode=640
+  with_items:
+  - control.key
+  - control.pem
+  - server.key
+  - server.pem
+  notify:
+  - restart unbound
+  tags:
+  - config
 
 - name: Enable and start unbound service
   service: state=running enabled=true name=unbound
-- 
1.8.3.1
_______________________________________________
infrastructure mailing list
infrastructure@xxxxxxxxxxxxxxxxxxxxxxx
http://lists.fedoraproject.org/admin/lists/infrastructure@xxxxxxxxxxxxxxxxxxxxxxx