From f448bcbdf07cf988ab50950df95d822f359041db Mon Sep 17 00:00:00 2001
From: Aaron LI <aly@aaronly.me>
Date: Wed, 18 Apr 2018 03:13:13 +0800
Subject: web: Fix private path for the dhparam file

---
 roles/web/tasks/main.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

(limited to 'roles')

diff --git a/roles/web/tasks/main.yml b/roles/web/tasks/main.yml
index e3537ed..d25fdc8 100644
--- a/roles/web/tasks/main.yml
+++ b/roles/web/tasks/main.yml
@@ -10,7 +10,7 @@
 - name: (local) ssl/tls - check dhparam existence
   become: false
   stat:
-    path: "{{ playbook_dir }}/ssl/dhparam4096.pem"
+    path: "{{ playbook_dir }}/private/ssl/dhparam4096.pem"
   delegate_to: localhost
   register: stat_result
 
@@ -18,13 +18,13 @@
   become: false
   command: >
     openssl dhparam
-    -out "{{ playbook_dir }}/ssl/dhparam4096.pem" 4096
+    -out "{{ playbook_dir }}/private/ssl/dhparam4096.pem" 4096
   delegate_to: localhost
   when: not stat_result.stat.exists
 
 - name: ssl/tls - copy dhparam
   copy:
-    src: "{{ playbook_dir }}/ssl/dhparam4096.pem"
+    src: "{{ playbook_dir }}/private/ssl/dhparam4096.pem"
     dest: /usr/local/etc/ssl/dhparam4096.pem
     mode: 0444
 
-- 
cgit v1.2.2