kivitendo mit ssl

[fsit_smgt.git] / tasks / kivitendo.yml

diff --git a/tasks/kivitendo.yml b/tasks/kivitendo.yml
index faaa69f3f7fe104cff9175d534d62a5807c2bfa7..a9019adf2922562f16e5f3c0df6ea70f008c1b67 100644 (file)
--- a/tasks/kivitendo.yml
+++ b/tasks/kivitendo.yml
@@ -89,7 +89,7 @@
 
 - name: Copy over Kivitendo.conf.
   ansible.builtin.copy:
 
 - name: Copy over Kivitendo.conf.
   ansible.builtin.copy:

-    src: files/kivitendo.conf
+    src: files/kivitendo/kivitendo.conf

     dest: /var/www/kivitendo-erp/config/kivitendo.conf
     owner: www-data
     mode: 'u=rw,g=rw,o='
     dest: /var/www/kivitendo-erp/config/kivitendo.conf
     owner: www-data
     mode: 'u=rw,g=rw,o='


@@ -140,6 +140,34 @@
     method:    trust
   notify: Restart postgresql
 
     method:    trust
   notify: Restart postgresql
 

+# apache server for kivi
+- name: Activate apache fastcgi, headers and ssl modules.
+  community.general.apache2_module:
+    state: present
+    name: "{{ item }}"
+  loop:
+    - fcgid
+    - headers
+    - ssl
+    - rewrite
+    - socache_shmcb
+  notify: Restart apache
+
+- name: Copy over apacha ssl-conf
+  ansible.builtin.copy:
+    src: files/kivitendo/default-ssl.conf
+    dest: /etc/apache2/sites-available/default-ssl.conf
+    mode: '640'
+  notify: Restart apache
+
+- name: Disable 000-default.conf
+  ansible.builtin.command: a2dissite 000-default.conf
+  notify: Restart apache
+
+- name: Enable SSL
+  ansible.builtin.command: a2ensite default-ssl
+  notify: Restart apache
+

 # Anleitung adaptiert
 # https://github.com/kivitendo/kivitendo-ansible/blob/master/main.yml
 #
 # Anleitung adaptiert
 # https://github.com/kivitendo/kivitendo-ansible/blob/master/main.yml
 #