Merge "Store RabbitMQ cert/key in config dir"

playbooks/roles/rabbitmq_server/defaults/main.yml

@@ -53,9 +53,9 @@ rabbitmq_plugins:
     state: enabled
 
 # RabbitMQ SSL support
-rabbitmq_ssl_cert: /etc/ssl/certs/rabbitmq.pem
+rabbitmq_ssl_cert: /etc/rabbitmq/rabbitmq.pem
-rabbitmq_ssl_key: /etc/ssl/private/rabbitmq.key
+rabbitmq_ssl_key: /etc/rabbitmq/rabbitmq.key
-rabbitmq_ssl_ca_cert: /etc/ssl/certs/rabbitmq-ca.pem
+rabbitmq_ssl_ca_cert: /etc/rabbitmq/rabbitmq-ca.pem
 
 # Set rabbitmq_ssl_self_signed_regen to true if you want to generate a new
 # SSL certificate for RabbitMQ when this playbook runs.  You can also change

playbooks/roles/rabbitmq_server/tasks/rabbitmq_ssl_user_provided.yml

@@ -20,12 +20,12 @@
   copy:
     src: "{{ item.src }}"
     dest: "{{ item.dest }}"
-    owner: "root"
+    owner: "rabbitmq"
-    group: "root"
+    group: "rabbitmq"
     mode: "{{ item.mode }}"
   with_items:
     - { src: "{{ rabbitmq_user_ssl_cert }}", dest: "{{ rabbitmq_ssl_cert }}", mode: "0644" }
-    - { src: "{{ rabbitmq_user_ssl_key }}", dest: "{{ rabbitmq_ssl_key }}", mode: "0640" }
+    - { src: "{{ rabbitmq_user_ssl_key }}", dest: "{{ rabbitmq_ssl_key }}", mode: "0600" }
   when: rabbitmq_user_ssl_cert is defined and rabbitmq_user_ssl_key is defined
   tags:
     - rabbitmq-configs
@@ -37,8 +37,8 @@
   copy:
     src: "{{ rabbitmq_user_ssl_ca_cert }}"
     dest: "{{ rabbitmq_ssl_ca_cert }}"
-    owner: "root"
+    owner: "rabbitmq"
-    group: "root"
+    group: "rabbitmq"
     mode: "0644"
   when: rabbitmq_user_ssl_ca_cert is defined
   tags: