make the role indempotant with cert renewal

2021-09-11 16:39:42 +02:00 · 2021-09-11 16:39:42 +02:00 · 0a3b7bf590
commit 0a3b7bf590
parent ce8496040a
2 changed files with 27 additions and 11 deletions
--- a/roles/generate-cert/defaults/main.yml
+++ b/roles/generate-cert/defaults/main.yml
@ -3,3 +3,5 @@ key_usage:
  - digitalSignature
  - keyEncipherment
 validity_duration: "+365d"
+time_before_expiration_for_renewal: "+30d" # need a better name
+force_renewal: no