setup default nginx ssl/security configuration for vagrant

2015-10-04 19:32:42 +02:00 · 2015-10-04 19:32:42 +02:00 · 3c6b779c44
commit 3c6b779c44
parent 18ae1e15f4
6 changed files with 103 additions and 7 deletions
--- a/salt/roots/base/nginx.sls
+++ b/salt/roots/base/nginx.sls
@ -19,3 +19,20 @@ nginx-common:
      - pkg: nginx-common
    - watch_in:
      - service: nginx
+
+{% set nginx_ssl_keydir = salt['pillar.get']('nginx:sslkeydir', '/etc/nginx/ssl/private') %}
+{% set nginx_ssl_certdir = salt['pillar.get']('nginx:sslcertdir', '/etc/nginx/ssl/certs') %}
+
+{{ nginx_ssl_certdir }}:
+  file.directory:
+    - user: root
+    - group: root
+    - mode: 0755
+    - makedirs: True
+
+{{ nginx_ssl_keydir }}:
+  file.directory:
+    - user: root
+    - group: root
+    - mode: 0750
+    - makedirs: True