dustin
/
configpolicy
1
1
Fork 0
Code Issues Releases Activity

restic: Trust dch-root-ca certificate 

Since the MinIO server that Restic uses to store snapshots has a
certificate signed by the DCH CA, we need to trust the root certificate
in order to communicate with it.  Existing servers already had this CA
trusted by the `pyrocufflink.yml` playbook, but new servers are not
(usually) AD domain members anymore, so we need to be explicit now.
unifi-restore
Dustin 2025-03-29 09:34:17 -05:00
parent daa59bdba5
commit 572022b557
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
restic.yml
View File

@ -1,5 +1,10 @@
- hosts: restic - hosts: restic
roles: roles:
- role: trustca
ca: dch-root-ca-r2
tags:
- trustca
- dch-root-ca
- role: restic - role: restic
tags: tags:
- restic - restic