Move `Delete the CA key` task to the appropriate role (#1393)

5 years ago · 1c7e1dc331
parent 4ea1dcdf5a
commit 1c7e1dc331
2 changed files with 10 additions and 10 deletions
--- a/roles/strongswan/tasks/openssl.yml
+++ b/roles/strongswan/tasks/openssl.yml
@ -209,3 +209,13 @@
    - gencrl.changed
  notify:
    - rereadcrls
+
+- name: Delete the CA key
+  local_action:
+    module: file
+    path: "{{ ipsec_pki_path }}/private/cakey.pem"
+    state: absent
+  become: false
+  when:
+    - ipsec_enabled
+    - not algo_store_cakey
--- a/server.yml
+++ b/server.yml
@ -37,16 +37,6 @@
        tags: ssh_tunneling

      - block:
-        - name: Delete the CA key
-          local_action:
-            module: file
-            path: "{{ ipsec_pki_path }}/private/cakey.pem"
-            state: absent
-          become: false
-          when:
-            - ipsec_enabled
-            - not algo_store_cakey
-
        - name: Dump the configuration
          local_action:
            module: copy