Add new profile x509cert_common

This commit adds a new profile that takes care of putting X.509 server
certificates as well as their private keys and certificates at a common
location. The hiera data for the email host have been adapted for this
new profile which will be used by a new profile for managing nginx based
reverse proxies.

1 files changed, 131 insertions, 0 deletions

diff --git a/hieradata/nodes/email.yaml b/hieradata/nodes/email.yaml
index 8aba2fb..4b5f0b9 100644
--- a/hieradata/nodes/email.yaml
+++ b/hieradata/nodes/email.yaml
@@ -165,3 +165,134 @@ profiles::cacert_selfservice_api::server_private_key: >
     huAu6YafNhB8IBwK4oljoITzHVxzpCAP/Pis44IKOkbj4/HWQmJH/IQXmMEl
     /02OqZvJJOgkpUGYrsJud+ZAATIhpZwb8JfQMw6mes/6aPdGCZjMJaHPgFjU
     h6Q0uA==]
+profiles::x509cert_common::certificates:
+  'community.cacert.org':
+    certificate: |
+      -----BEGIN CERTIFICATE-----
+      MIIHnjCCBYagAwIBAgIDFHywMA0GCSqGSIb3DQEBDQUAMHkxEDAOBgNVBAoTB1Jv
+      b3QgQ0ExHjAcBgNVBAsTFWh0dHA6Ly93d3cuY2FjZXJ0Lm9yZzEiMCAGA1UEAxMZ
+      Q0EgQ2VydCBTaWduaW5nIEF1dGhvcml0eTEhMB8GCSqGSIb3DQEJARYSc3VwcG9y
+      dEBjYWNlcnQub3JnMB4XDTIwMDIxOTExMzk1M1oXDTIyMDIxODExMzk1M1owYTEL
+      MAkGA1UEBhMCQVUxDDAKBgNVBAgTA05TVzEPMA0GA1UEBxMGU3lkbmV5MRQwEgYD
+      VQQKEwtDQWNlcnQgSW5jLjEdMBsGA1UEAxMUY29tbXVuaXR5LmNhY2VydC5vcmcw
+      ggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDKY4Bz8s5f0AK56dGIl8y1
+      qnLyNhJr2pxJF9PInO33meBiCqpoTWpPHyIO51NGeySrlW35ZXUzp6tBMptXQict
+      J7PkQcSf+lEn1AmRtWHIFNf/uM5IlgoomKktbAkkK+PLOtDBuZ40sKnRY1ooJ9ZK
+      UnOrb5puz1D+JHp8JYxkPfknCNAZLeNPXqn9QqnpFKk8/c2CrVF8hShk/k5t2Dpr
+      Q0Et9FkPOYBru9p5LQXQBA5QKPg1ESAVKYxRLbR4tJ02we6rOKWgLCnETlMmdjky
+      NgaDG6dg79wNKu/uuYyQSXaAnJU67RGXNxIpudOlZ0c2+467mWDFaUHY4yzGTquq
+      OGhMDXJu2fe7kDcBP8qH9YeIhN1WSLSnN4cbIP9UVxZXNfZ0WnA2Drj8iGlpL48v
+      vBzuUD6EZ+WTeOkoapb0CRGAB+wdMQ6Tg+87tx8vUkhilk3NZ3kKRzOoDKiDisK9
+      /WFh8aU7Eq62V15TmzOOkCHmXME1KH2CuzG4MQzalFz8ahRQQnezEMt91uHvCZya
+      t5lcGr9W57FnYcxG6KqUO4iV6HWmJYXYhl5PfpEKzKktceH1PnuDptnE8mtdJW1T
+      8p43ubgcAGxEvsq6nbeY76b1xlIkq1/NEL3BPDSoz+Tnz5MwLKjHQcqA7Av/KRH3
+      VBnw4YI0VtGxZnz4wjyA8wIDAQABo4ICRTCCAkEwDAYDVR0TAQH/BAIwADAOBgNV
+      HQ8BAf8EBAMCA6gwNAYDVR0lBC0wKwYIKwYBBQUHAwIGCCsGAQUFBwMBBglghkgB
+      hvhCBAEGCisGAQQBgjcKAwMwMwYIKwYBBQUHAQEEJzAlMCMGCCsGAQUFBzABhhdo
+      dHRwOi8vb2NzcC5jYWNlcnQub3JnLzAxBgNVHR8EKjAoMCagJKAihiBodHRwOi8v
+      Y3JsLmNhY2VydC5vcmcvcmV2b2tlLmNybDCCAYEGA1UdEQSCAXgwggF0ghRjb21t
+      dW5pdHkuY2FjZXJ0Lm9yZ6AiBggrBgEFBQcIBaAWDBRjb21tdW5pdHkuY2FjZXJ0
+      Lm9yZ4Ibbm9jZXJ0LmNvbW11bml0eS5jYWNlcnQub3JnoCkGCCsGAQUFBwgFoB0M
+      G25vY2VydC5jb21tdW5pdHkuY2FjZXJ0Lm9yZ4IZY2VydC5jb21tdW5pdHkuY2Fj
+      ZXJ0Lm9yZ6AnBggrBgEFBQcIBaAbDBljZXJ0LmNvbW11bml0eS5jYWNlcnQub3Jn
+      ghBlbWFpbC5jYWNlcnQub3JnoB4GCCsGAQUFBwgFoBIMEGVtYWlsLmNhY2VydC5v
+      cmeCF25vY2VydC5lbWFpbC5jYWNlcnQub3JnoCUGCCsGAQUFBwgFoBkMF25vY2Vy
+      dC5lbWFpbC5jYWNlcnQub3JnghVjZXJ0LmVtYWlsLmNhY2VydC5vcmegIwYIKwYB
+      BQUHCAWgFwwVY2VydC5lbWFpbC5jYWNlcnQub3JnMA0GCSqGSIb3DQEBDQUAA4IC
+      AQAZO0nwoA6/kYbl/xpKvBCS0HVJcGhKWDG/P9RhJnimeW9637o+8LcJFqDcriF6
+      cNPi7A0RSO99uHIuw5aXgEbp25b0i6xMqw4QhzkKXK0DNZtF5LWJ6PGQPlLSCSuV
+      hnRJXEzGVRuN+8o+tXquTBwhMwIyUIW/7iO9Xw5blSJ41+yezXQ6Gh/sw0o4ptuc
+      4D9yGqABhPTl3jq6ifGJUPdAf5l4kOebHBlNbeiTKLGZrohgU6wC+Xk0r0JCb0UH
+      K6O7989i+lAnYEuQLJ3ULr8yDMLayrFHJN5jzXlcdoCiPwF/zlkYNBq1hVj8uZGW
+      o1DMbXlVbT1sSmqRoAcp1uuUc5zCpSXImVKwM1x6mfEMsffjqItI/3+z0yg17pn0
+      Dprun2HT+k/jwNJUH3YVcqgshkiBLSKyBXy5pn9G5wPdbpZRcXmV5fwhk63N9XV5
+      Q7AiVxSEIBtka9IEWVAYE4djdavGBKZGGu5zB4T1aeBcOmr5V1NcDqwcOiufIVUg
+      uDAZu7SJmF/VgqifaLsPnbHy+yxaEAWbtxFq/OfbyM0HO9oS4Mdnv5tjOFEyR3QV
+      TW0DaOGtQ+OTBuFUn+W/bri9/t9nBy04v/8HdkPdtepnAIclk3wUtQ7RT2ABD6PM
+      F7xpy8QfaHyI4bGakoiWh00gbgVtGF91TBb/eieHVbxThw==
+      -----END CERTIFICATE-----
+    private_key: >
+      ENC[PKCS7,MIIOHQYJKoZIhvcNAQcDoIIODjCCDgoCAQAxggEhMIIBHQIBADAFMAACAQEw
+      DQYJKoZIhvcNAQEBBQAEggEASjY9sPrkG5kV3JDfDstvejhKj24Q2y/6eBjE
+      qq5r44lK1IasWs9RXRNfjlTJnF93N53yV51jotpEOmUHW9gMGmDAG6xgoZRe
+      jB5RnGi+uSMfDTXpJ6yhRV+s3cx+iI6M6hqPUV4BLrUtSphuMwnX+H5IZ7SI
+      t26l0ejbrJt0KVPEbO0Be5pSvhecvseuYfHK8ki4KWrsOqOIPbNMBOlUevM2
+      0XOGBqY0IXmMcu4Sgi7q9CwgEjKbyEMa2IoqO82W9YKgAGQ6fzuPFtsJBxzL
+      ozM7O509pVzThemWXBFlZKA8HT3w57VERuacWduRVhsXPY7ZX3Qm4U1kljqw
+      Y4JctTCCDN4GCSqGSIb3DQEHATAdBglghkgBZQMEASoEEF7GaFooX40gewq8
+      t3AZCiiAggywDvy18h6qIVtNy6S854Nwk8RLE2g20dWfxOEiSgzWkm/DNxCB
+      Qje1rED+9eXoqWjRGw9fmAeZgY62jSnTbciqd6siNscO4c939d9slelnqca0
+      +Ln/ZH+eGl6EBRN3cXsGrVYqAmn4Vgs3efWHi+kfvrDH7a+/y4C9K62qmN9q
+      H/E7KYiKV1PVNNinBuyrdqS5+2oEzdwcCCFCxeYLFKuOGlv3Ka5qJvJXJgBz
+      W0vItwxB7j8ID3BimyMafNj1Zs6mOqY4N+W3ToseS3VnYNF9vv1bc1TKeKcm
+      bFZWj4/Bmqv0MAHcT0KWpP6mf0j9T3D/OX5/u6G9Dokxs0j/73MJcTrh8Gdc
+      wNsjeyyH3lMoh7xuuY72r3D0n8UgsMTZEJt8QMt4gHYUOtIOEwEzpV0HzwFY
+      lKOeTnNgS5m8scbT7hvq3PUS5zwplJOjBibkVU8IWeLy1WjpjF3LgmMoSre2
+      IOrHf/QaJZliZMyYPztFVIFuj73fWmm7qFN0wGF4RcXcxuD2umGP661iMwPD
+      T2NggmvV66mKyaAs23R01uav1C350sKuaCx9668Vp8XJvE57NS/s5DfTT9yc
+      4SjFIFS3T7A3SSqYTDeD90YzQz/f5tQwID35yoOqg+n5irdjH5W5pU+d9Hl2
+      85Rtlxp5mju8PTho8miC10GapYCP2Z1tV6+NQzcFiyOubsfLck0lopbQGnEW
+      WJCeGvgFSkeDUJGfJc57Fb91/+Q3WnyPC1MWxiSm+0B6fnJmQiGCyEjII4oy
+      izsHir4Jc++MIie3Z6SYykUybxz4eeUhy22CC0jvmxUvwxGrKflU65TNsmth
+      54Z0fAyUyEG0UZoOiKVcVhkvgvvFPAkNytZThdW1THsHX8X2P5+Y4TgwWUht
+      A979wZDmtBv8RntNVnRmraOo+I1pvcvYzsgQKPb7grt0Bs2YgkYvyLfikYqQ
+      +kZhiQpfp/OL/4xDwA5i/zua0W0VvaXnafgkk7UNtN2RFT2L2/WlsQaAbQG1
+      E2fQuiNWe+oCP/yUk/01yeAmqspO9MTpKlVOW08JnHin1j3mtyryfD9DtlcM
+      NKFZYKK7AIT1zWTWZYI96pNe2PQXqDvAXC0n3rnaq+xiF6TZwybLxAW/g1Cs
+      TkcN/4fCDY4ohiJwFhVlDCb/tnowpoGJii/6d+cGPG8DVZb0pp2soaqM1lNY
+      Yk/UEXlBq9Zp+X7ZozW91Ecb9dyOSae7s7A0wX6EATKsJXpINONHYy2mQQZA
+      lo3NYt65BZNPENYboOYbWJHdLInA+3KK9On1qi7IFr2HSbBWLsf86IP6tyg+
+      rn4+d9YEFRuaLhy1I60yhs7j2Vibq9fbzfSml5GKTcemEKK+77dTD1PPHMEB
+      PKiK1uQvb84TofgVYzTw5MoC1jFCKjla9KaiwknO9f0qQ78YTxfBwS9AiFXB
+      oKgH8YPT6eLJ8QBaNnb/4zfE9KGgSk1XXKsp2gIk7rKJUNnBPjOjBQVTqypd
+      +Bk67yKwQl6o6JZmtZEbGr0o5nKaExKFTOZjvAQ4UyeHhctyM2C6ntZ2/0Vv
+      6rYfQJgJOhCP/zcMr/o5bUzYm4NQKE1q5BhQSxIMHEujpxl8aEiCNoi9SPGH
+      ZNvrsIVPqXI/6r0uKOnykv2rrz04lPkEthimROYZbL5A8lT2fdQL6oCuSN7r
+      5lFlX6+JrjR8ITNZIlUvhtu5dgInD5IWkR5+W8AwiL3y/D6fR2duHGSvo+A4
+      YkVJDwGrLgLOrRi/4ZZYOfuZAI8dbiW0Vh14So5Qy0TSu1dTfvJxxGSI852N
+      sNCAm9Sy0nrN81VPwaAJsDS1osDciy8O+FYu+zMqO/WqozyQqFSA5qAhfPVu
+      rhhomAhKYhXGQ2tnthjM3+hAlMQflIvPVwvgAEeUlp0O2rABGWJiAn6XmewO
+      GPIySnd6x7Jmyk0cfwVZLpYMldtKQgR0BD13HXGLbDeSszFC/9GpHtUkZEQe
+      nMLbLbQfV2/dK53R7LvRuGHoeEnY2P7ynZ0+y7bkXCq01ftBggzPwPPkVJK+
+      nchRlTIacWPJvZ8sO3wbjTcVxJsBoTNsEGKxi6s7KCagNxMF5uFcPfHHW66e
+      S5jQCKjSblM/DAcHEWTbqvAFUfLMVq3oJmvty9aiJe/FAQRKcTrGCx6JK2l3
+      /4pIyPi7bdQfBO19OneOyrlee99ACfke626ZzJLPI6l3WmypnCRXzBkXFQ9P
+      S7acAPAFdVaHZz/mHkjmv8cOPxnSJyh0nEi7zxS4nVqcKo3FXs+cyfhdTLt7
+      aefx46XMzhF61ShVthPq86xDIZo1R38O3ArZpRMilvvTLTHWVEC0zcBZutKY
+      QxB5dFQCNbNg0D7BI4W1pEdxKY+GQM/uC7nQsii5En/5Ht4nI5tmLqqvlmn5
+      Uu8Qvw0tf2ekIVo7IurOIojFKKSdpK4ixML2NlUKWMCkeuvlqh/owSjKyZqS
+      0es64lkYiJlwvHrNXJSSiAXX2P3YPcP2YHv3nrwd/jiRodVYokLfrWOM1Ii7
+      G10lYvUHy6OTRdZ7u/eaVN6Bwkoo4GRt8vXhMB/9xoPt21zo/bTXHgInMOni
+      IXVH52IG89ZnrNH7aZ15XpzlhKfkuZkStO0EJBUX+409pzcUFLRSyy5lwdQz
+      NcGcsFNiLqLJiCWSqI7A9tQBbJcSF/M8xsQUPzBtefGv2+gDFWq1MWhafUpr
+      B9nw3r0tUh9BbBQNSnv/yb1ycgRWLMFLhQ7KJaqb6xoW40MxvRaB4vU8IAHr
+      wiie+WOhyLZwdPAJABY63QN4SsTqPmVB+4o3pieuOnV2BNFMyNltEYhBdzMo
+      7Z4x6m8V7z9ZHLvEF5pTDMK30OKn8n7g7gYqHw7Kf4LHIWw2f6KSckW8a1ES
+      EHDVTuprO4qEIEr08TD6noDS03x+W+8CNYw6Dn4tyDWiocwjH6AhcuNEx3Wr
+      KFBR2vobH76poNkWf6GresQKxrde+K+BfDKmBcg4zwpGIW22JvZ5zkguK6/6
+      cygWrhBOtbr2l4yi+NJlN7I38rxdgAa5sYG2azctSI0Cdf4oFxoGafnfRbzg
+      f5cHDNkt4pJTxZX/wOp1FFE0dCJUoyPrm5miEuDwKlOx0Cby8QRSkP7nOtWp
+      cK8jV6pyPcC2KuOioHT/u4I+VDA4aYXu56E6Hw1QSSn1p+eTZvTMQdzNbkpf
+      Q93EabnZVuBeDd7Wa2vuoTUP8QudPteThtIOQst6EsF2TB+AynNHxNaPNvOh
+      D97UUHMBtV/X6MscGViKuJoVZP8URZQvzzKN6BzpcXedSRXDb1+LshCeHJ36
+      n8q6Blyuv2SJvPCBo174AjfJTur+mRtRLpiG0wc6jeWaOCfCHxzPOG4l11hh
+      gmBe63rqe5tnLnsQmlGxODtiXOa83359kGbXk97/5mcLE8XCUHhOPiRaiyzO
+      +uF3JpE2lokV+dvGm5T89s7oTN6Fe3oIV/nwubObQiXffOObfnyz59CbDz5m
+      OhPdhG/44Pqxf4fkwmYFiQNek+OCvcy3dktkkM1x01c8V7Z+6Y67mMD0qfsP
+      KSGarw1QICwuw1Z6KC/8CzjR2gI3cpGBNIo0rxIMwFqz9C5FVaLkhu7RhJSl
+      Nx/baewx9C3V4ko3rOYK9R6zilgsgD35NKFBbtZVL4HVC2FRdUEWWpNc8YJC
+      kmFpmbU8HXyBCJxgbsXJHm9BOXnS8FCSoxvFIaa1QM7Nupl08RMMVez5JAPE
+      1uO2Azm+hO2hh2TPLGWaVK40rZiqQF6E5JO9lAkfH7ouGjppWTNpBCH7FGGt
+      f12BKYvG09EA33iu5Mdpmib/wPGs3Ml6BnvVgsGN1KLConR+9wQcSGejyWRq
+      EvKYD91e+bvhFKZYuPDmN2McGmXk3vhz7JqF2csLN69JBsiF7CV1BFyE10aF
+      bpWvFwjWxxlFb5zYWYwIdCIO96yvA+YJOKUVvoQfRjGLjI8awcoBySawtPdU
+      SEOU14NLPqMmqD0IWcbvzWJF7kNZ0LhTMGJrD5vxx8uxdfAgoNa5DfQpWJsr
+      fDgxJErQ2cCbzJry5mgc1aSzrDbYWPEQPrPuajXLA5D8tG+RZfUxV8caHyMr
+      bCFFJjqPlA35Nu4nLAiGUzKVWOsyn6yj3V0ilLbnxNE+228L5+ilJ+9VL47U
+      p2wdlrXzxo2QIvEj0o5K01HAwM3sa6Cjc6G5yP3CGvLVUa9FxNfO+5EX186V
+      iyOu2RTt5M8hIaiVSrl/RDSPiAPaxN1y8akjAle/ySMJPGYQLQaj0Fpb7Ios
+      yCdnmm5GDIi4jej5SpmnnI2LszdUMpRjQrXKC5jFwXXArMKc6Do9PHNR0zy0
+      wtocG6a7vmje7zEjMuVJTq4=]
+    cacerts:
+      - class3_X0E
+      - class1_X0F