diff --git a/tasks/copy_ssl.yml b/tasks/copy_ssl.yml index 62848e9..488040e 100644 --- a/tasks/copy_ssl.yml +++ b/tasks/copy_ssl.yml @@ -3,21 +3,13 @@ - name: '[COPY SSL] - Fetch Certificates' synchronize: mode: pull - src: '/etc/letsencrypt/' + src: '/etc/letsencrypt/live' dest: '/etc/ansible/ssl/{{ inventory_hostname }}' + copy_links: 'true' when: install_letsencrypt == 'true' notify: - reload nginx -- name: '[COPY CERTS] - Copy certs archive to webservers' - synchronize: - src: '/etc/ansible/ssl/{{ item.server }}/live/{{ item.domain }}' - dest: '/etc/letsencrypt/live/{{ item.domain }}' - when: letsencrypt_copy_certs == 'true' - loop: '{{ letsencrypt_copy_cert_from }}' - notify: - - reload {{ item.service }} - - name: '[COPY CERTS] - Make sure direcotry permissions to cert path is correct' file: path: '/etc/letsencrypt/live/{{ item.domain }}' @@ -26,3 +18,22 @@ group: '{{ item.group }}' when: letsencrypt_copy_certs == 'true' loop: '{{ letsencrypt_copy_cert_from }}' + +- name: '[COPY CERTS] - Copy certs archive to webservers' + synchronize: + src: '/etc/ansible/ssl/{{ item.server }}/live/{{ item.domain }}' + dest: '/etc/letsencrypt/live/' + copy_links: 'true' + when: letsencrypt_copy_certs == 'true' + loop: '{{ letsencrypt_copy_cert_from }}' + notify: + - reload {{ item.service }} + +- name: '[COPY CERTS] - Make sure direcotry permissions to cert path is correct' + file: + dest: '/etc/letsencrypt/live/{{ item.domain }}' + owner: '{{ item.owner }}' + group: '{{ item.group }}' + recurse: 'yes' + when: letsencrypt_copy_certs == 'true' + loop: '{{ letsencrypt_copy_cert_from }}'