New role for Debian-specific configuration.

Move the PKI-management scripts over, because they're not truly common.

diff --git a/all.yml b/all.yml
index c1af70865c2f9856059bcd304d52966f3099ebe1..13f9a27566d9f23dba6554296571bb82cb02b975 100644 (file)
--- a/all.yml
+++ b/all.yml
@@ -9,3 +9,9 @@
   gather_facts: no
   roles:
     - common
+
+## Operating-system-specific configuration.
+- hosts: debian-hosts
+  gather_facts: no
+  roles:
+    - debian

diff --git a/roles/common/tasks/main.yml b/roles/common/tasks/main.yml
index 42bc86c80c8cf1d8e0f76f3caee4dec9490d4fc7..f20dc0f65e4e3982a66bfae279327d9d55971c0f 100644 (file)
--- a/roles/common/tasks/main.yml
+++ b/roles/common/tasks/main.yml
@@ -14,13 +14,6 @@
 ###--------------------------------------------------------------------------
 ### PKI machinery.
 
-- name: install PKI maintenance scripts
-  tags: [pki, pki-scripts]
-  copy: src=pki/{{ item }} dest=/etc/cron.daily/
-  with_items:
-    - update-ca-certs
-    - check-x509-certs
-
 - name: install common PKI files
   tags: [pki, pki-keys]
   copy: src=pki/{{ item }} dest=/etc/ca/

diff --git a/roles/common/files/pki/check-x509-certs b/roles/debian/files/pki/check-x509-certs
similarity index 100%
rename from roles/common/files/pki/check-x509-certs
rename to roles/debian/files/pki/check-x509-certs

diff --git a/roles/common/files/pki/update-ca-certs b/roles/debian/files/pki/update-ca-certs
similarity index 100%
rename from roles/common/files/pki/update-ca-certs
rename to roles/debian/files/pki/update-ca-certs

diff --git a/roles/debian/tasks/main.yml b/roles/debian/tasks/main.yml
new file mode 100644 (file)
index 0000000..70bf371
--- /dev/null
+++ b/roles/debian/tasks/main.yml
@@ -0,0 +1,17 @@
+### -*-yaml-*-
+###
+### Tasks applicable for all Debian hosts.
+
+---
+
+###--------------------------------------------------------------------------
+### PKI machinery.
+
+- name: install PKI maintenance scripts
+  tags: [pki, pki-scripts]
+  copy: src=pki/{{ item }} dest=/etc/cron.daily/
+  with_items:
+    - update-ca-certs
+    - check-x509-certs
+
+###----- That's all, folks --------------------------------------------------