---
# acme handlers/main.yml
#
# SPDX-FileCopyrightText: © 2020 Open Networking Foundation <support@opennetworking.org>
# SPDX-License-Identifier: Apache-2.0

- name: install-certs
  become: true
  become_user: "{{ acmesh_username }}"
  command:
    chdir: "{{ acmesh_base_dir }}/home/.acme.sh"
    cmd: >
      ./acme.sh
      --install-cert
      -d {{ item.cert_names | join (" -d ") }}
      --key-file {{ certificate_dir }}/{{ item.cert_names | first }}/privkey.pem
      --fullchain-file {{ certificate_dir }}/{{ item.cert_names | first }}/fullchain.pem
      --reloadcmd "sudo /bin/systemctl restart {{ webserver_service }}"
  with_items: "{{ acme_certs }}"