16 lines
563 B
Plaintext
16 lines
563 B
Plaintext
|
#!/bin/bash
|
||
|
|
# Generator for managed certs for {{ nebula_nodename }}
|
||
|
|
{{ nebula_bin_dir }}/nebula-cert sign \
|
||
|
|
-name "{{ nebula_nodename }}" \
|
||
|
|
-ip "{{ nebula_ip | mandatory }}" \
|
||
|
|
-groups "{{ nebula_groups | join(',') }}" \
|
||
|
|
-ca-key "{{ nebula_config_dir }}/ca.key" \
|
||
|
|
-ca-crt "{{ nebula_config_dir }}/ca.crt" \
|
||
|
|
{% if nebula_cert_public_key is defined %}
|
||
|
|
-in-pub "{{ nebula_config_dir }}/{{ nebula_name }}.pub" \
|
||
|
|
{% else %}
|
||
|
|
-out-key "{{ nebula_config_dir }}/{{ nebula_name }}.key" \
|
||
|
|
{% endif %}
|
||
|
|
-out-crt "{{ nebula_config_dir }}/{{ nebula_name }}.crt"
|
||
|
|
|