ansible_role_acmetool/tasks/main.yml

---
- ansible.builtin.include_tasks: versioncheck.yml
  when: submodules_versioncheck|bool

- name: Install acmetool
  ansible.builtin.package:
    name: 'acmetool'
    state: present
  tags:
    - installation
    - acmetool

# Todo: Reconsider best practice
#- name: Remove acmetool snippet for nginx from package installation
#  ansible.builtin.file:
#    path: '/etc/nginx/snippets/acmetool.conf'
#    state: absent
#  tags:
#    - installation
#    - configuration
#    - acmetool

- name: Create directory for acmetool response file
  ansible.builtin.file:
    name: '/var/lib/acme/conf'
    state: directory
    owner: root
    group: root
    mode: 'u=rwx,g=rx,o=rx'
  tags:
    - installation
    - acmetool

- name: Copy acmetool response file
  ansible.builtin.template:
    src: 'files/response-file.yml.j2'
    dest: '/var/lib/acme/conf/responses'
    owner: root
    group: root
    mode: 'u=rw,g=r,o=r'
  tags:
    - configuration
    - acmetool
    # Todo: with_first_found?
    # consider usage of loop:

- name: Perform acmetool quickstart
  ansible.builtin.command: acmetool quickstart --expert
  args:
    creates: '/var/lib/acme/conf/target'
  tags:
    - configuration
    - operation
    - acmetool

- name: Copy hook to enable acmetool to restart services
  ansible.builtin.copy:
    src: 'files/restart'
    dest: '/etc/acme/hooks/'
    owner: root
    group: root
    mode: 'u=rx,g=rx,o=rx'
  tags:
    - configuration
    - acmetool

- name: Reload systemd and enable acmetool timer unit
  ansible.builtin.systemd:
    name: 'acmetool.timer'
    daemon_reload: yes
    enabled: yes
    state: started
  tags:
    - operation
    - acmetool