25 lines
1.1 KiB
YAML
25 lines
1.1 KiB
YAML
|
---
|
||
|
|
clients_pki_paquets:
|
||
|
|
- step-cli
|
||
|
|
|
||
|
|
clients_pki_steppath: "/etc/step"
|
||
|
|
|
||
|
|
# AC interne (serveurs_step_ca / infra-pki-01).
|
||
|
|
clients_pki_ca_url: "https://infra-pki-01.chezlepro.internal:8443"
|
||
|
|
clients_pki_provisioner: "admin@chezlepro.internal"
|
||
|
|
|
||
|
|
# Identite de l'hote.
|
||
|
|
clients_pki_nom_cert: "{{ ansible_fqdn | default(ansible_hostname) }}"
|
||
|
|
clients_pki_cert: "{{ clients_pki_steppath }}/certs/{{ clients_pki_nom_cert }}.crt"
|
||
|
|
clients_pki_cle: "{{ clients_pki_steppath }}/certs/{{ clients_pki_nom_cert }}.key"
|
||
|
|
|
||
|
|
# Secrets OBLIGATOIRES (Ansible Vault).
|
||
|
|
clients_pki_ca_fingerprint: "" # {{ vault_step_ca_fingerprint }} (empreinte racine de l'AC)
|
||
|
|
clients_pki_provisioner_password: "" # {{ vault_step_ca_provisioner_password }} (partage avec serveurs_step_ca)
|
||
|
|
|
||
|
|
# Depot apt officiel Smallstep (partage avec serveurs_step_ca).
|
||
|
|
clients_pki_depot_cle_url: "https://packages.smallstep.com/keys/apt/repo-signing-key.gpg"
|
||
|
|
clients_pki_depot_cle_fichier: "/etc/apt/keyrings/smallstep.asc"
|
||
|
|
clients_pki_depot_uri: "https://packages.smallstep.com/stable/debian"
|
||
|
|
clients_pki_depot_suite: "debs"
|