1 files changed, 13 insertions, 0 deletions

diff --git a/ansible/inventory/host_vars/mailmash/certs.yml b/ansible/inventory/host_vars/mailmash/certs.yml
new file mode 100644
index 0000000..fd6dde0
--- /dev/null
+++ b/ansible/inventory/host_vars/mailmash/certs.yml
@@ -0,0 +1,13 @@
+---
+certs:
+  # Copy only these private keys and certs from ansible into the system
+  requested:
+    - yourmail.server.com
+
+  # we receive our certs by scp from the main cert hosting service elsewhere
+  receiver: true
+
+  # These users have ansible-controlled ssh private keys
+  # (mainly for automated backups right now)
+  sshKeysForUsers:
+    - root