feat: Add SSL to nagios and NRPE

Signed-off-by: Julien Riou <julien@riou.xyz>

tasks/nrpe.yml

@@ -1,4 +1,11 @@
 ---
+- name: Check SSL requirements
+  ansible.builtin.assert:
+    that:
+      - nrpe_remote_ssl_cert_file is defined
+      - nrpe_remote_ssl_key_file is defined
+  when: nrpe_enable_ssl is truthy
+
 - name: Install NRPE
   ansible.builtin.apt:
     name:
@@ -38,6 +45,36 @@
     dest: /etc/default/nagios-nrpe-server
     mode: "0644"
 
+- name: Copy SSL CA
+  ansible.builtin.copy:
+    remote_src: true
+    src: "{{ nrpe_remote_ssl_ca_file }}"
+    dest: /etc/nagios/ca.crt
+    owner: nagios
+    group: nagios
+    mode: "0644"
+  when: nrpe_remote_ssl_ca_file is defined
+
+- name: Copy SSL cert
+  ansible.builtin.copy:
+    remote_src: true
+    src: "{{ nrpe_remote_ssl_cert_file }}"
+    dest: /etc/nagios/server.crt
+    owner: nagios
+    group: nagios
+    mode: "0644"
+  when: nrpe_remote_ssl_cert_file is defined
+
+- name: Copy SSL key
+  ansible.builtin.copy:
+    remote_src: true
+    src: "{{ nrpe_remote_ssl_key_file }}"
+    dest: /etc/nagios/server.key
+    owner: nagios
+    group: nagios
+    mode: "0600"
+  when: nrpe_remote_ssl_key_file is defined
+
 - name: Clone check-mqtt source code
   ansible.builtin.git:
     repo: https://github.com/jpmens/check-mqtt.git