damex / ansible-collections-cloudflare Goto Github PK
View Code? Open in Web Editor NEWansible cloudflare collection
License: GNU General Public License v2.0
ansible cloudflare collection
License: GNU General Public License v2.0
that's it. now it is passwordless key and we can keep password for it natively in inventory + ansible vault.
that would protect key if someone would want to snoop around ;)
so currently we have a cloudflare_acme
role that ensures certificate directory, acme account and go all the way to ensure acme certificates for domains in each zone.
it should not happen unconditionally like it happen now.
what we need to do is to add smart condition for this role to be skipped when cloudflare_acme_zones list is empty.
possible solutions to be evaluated but block
with when
condition should be considered last.
so it is possible security concern.
we need to disable authz when block with certificate fails (rescue?) and have it deactivated (by default) after issuing a certificate.
it is good enough for some simple use cases and works well.
it is currently in beta and there is no api present/documented.
need to wait till it gets api support (i guess it is there but no public documentation present yet) and then implement corresponding automation here.
currently we can only make new certificates but do no revoke old ones.
there is no clear implementation path for this problem since acme does not support revocation by domain and can't always guarantee existence of domain key+certificate (and we do not even know if domain certificate exists).
we need to implement certificate revocation in the most compatible and user friendly way possible.
A declarative, efficient, and flexible JavaScript library for building user interfaces.
๐ Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. ๐๐๐
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google โค๏ธ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.