files/replicate.sh

@@ -9,6 +9,4 @@ fi
 
 ipa-client-install -U -p admin -w $ADMIN_PASSWORD --server=ipa-replica2.actcur.com --domain actcur.com  --mkhomedir  --force-join
 
-ipa-replica-install --skip-mem-check
-
-ipa-ca-install
+ipa-replica-install --skip-mem-check

tasks/main.yml

@@ -25,11 +25,6 @@
     src: files/replicate.sh
     dest: /scripts/replicate.sh
 
-#this should be moved to dedicated selinux role down the road
-- name: Disable SELinux
-  ansible.posix.selinux:
-    state: disabled
-
 # create symlink for certs if letsencrypt is set up
 - name: check if letsencrypt is set up
   ansible.builtin.command: '[ -d "/etc/letsencrypt/" ]'