geerlingguy / ansible-role-redis

Ansible Role - Redis
https://galaxy.ansible.com/geerlingguy/redis/
MIT License
255 stars 197 forks source link

TLS support #88

Open Hraesvelg opened 2 weeks ago

Hraesvelg commented 2 weeks ago

hi everyone,

not very an issue, but i would like to enable TLS on my redis server, here my approach :

i use the ansible role geerlingguy.certbot to generate standard certificate after that i configured redis with :

redis_extra_config: |
  tls-port 5
  tls-cert-file /etc/letsencrypt/live/.../fullchain.pem
  tls-key-file /etc/letsencrypt/live/.../privkey.pem
  tls-ca-cert-file /etc/letsencrypt/live/.../chain.pem

first problem here certificate is owned by root and redis service expect that redis user is the owner... i could do a task to change owner but not satisfaying...

if someone have an example / some recommendation to do it...