Majic Ansible Roles currently make the TLS private key/certificate parameters optional, defaulting to using private keys and certificates from a specific directory with a particular naming schema.

However, the naming schema can vary widely based on the deployment, and it is already not the same as used in Majic Infrastructure (for example).

Instead of making use of the pre-defined directories with specifically named files, it would be less ambiguous to make all such private key/certificate parameters mandatory. This should also help simplify some of the tests.

The following should be done:

• Update the following roles:
  • ldap_server
  • mail_server
  • mail_forwarder
  • php_website
  • web_server
  • wsgi_website
  • xmpp_server
• Make TLS private key/certificate parameters mandatory.
• Drop the use of shared parameters tls_private_key_dir and tls_certificate_dir.
• Update role reference documentation.
• Update usage instructions.
• Update release notes.