Ansible Role: BounCA Key Management Server

This Ansible role helps you install the BounCA key management tool.

Requirements

BounCA should be installed on a single host without any other applications. In highly secure environments, it is even recommended to install BounCA on a dedicated server.

Role Variables

Here are the available variables with their default settings:

bounca_timezone: /usr/share/zoneinfo/Europe/Amsterdam

bounca_db_user: bounca
bounca_db_password: pleasechangemeimsecret
bounca_db_host: localhost
bounca_db_name: bouncadb

bounca_secret_key: pleasechangemeimsecret
bounca_email_host: localhost
bounca_admin_mail: bounca-admin@bounca.org
bounca_from_mail: no-reply@bounca.org

Dependencies

• repleo.nginx - This installs the nginx server.

Example Playbook

Here is an example of how to use this role in a playbook:

- hosts: all
  remote_user: root
  roles:
    - { role: repleo.bounca,
         bounca_timezone: /usr/share/zoneinfo/Europe/Amsterdam,
         bounca_db_user: bounca,
         bounca_db_password: <DB PASSWORD>,
         bounca_db_host: localhost,
         bounca_db_name: bouncadb,

         bounca_secret_key: <GENERATE AND INSERT A DJANGO SECRET>,
         bounca_email_host: localhost,
         bounca_admin_mail: [email protected],
         bounca_from_mail: no[email protected]
    }

To run the playbook, use these commands:

# ansible-galaxy install repleo.bounca
# ansible-playbook test.yml -i <HOST OR IP>,

You can also install the role on your local machine:

# mkdir -p ./roles
# ansible-galaxy install repleo.bounca -p ./roles
# ansible-playbook test.yml -i <HOST OR IP>,

License

GPL v3 - (c) 2016, Repleo, Amstelveen

Author Information

Repleo, Amstelveen, Netherlands -- www.repleo.nl
Jeroen Arnoldus (jeroen@repleo.nl)