---
################################################################################
# Created Date: Sunday December 21st 2025
# Author: Aaron Johnson aaron.johnson@akamai.com
# -----
# Last Modified: Tuesday, 24th February 2026
# Modified By: the engineer formerly known as Aaron Johnson
# -----
# Copyright (c) 2025 Contact Author for details
# -----
# USAGE/DOCUMENTATION:
# 
# -----
# INSTALLATION
# 
# -----
# HISTORY:
# Date      	By	Comments
# ----------	---	---------------------------------------------------------
################################################################################


- name: Issue certificate
  shell: |
    . {{ acme_home }}/godaddy.env
    export ACME_DEFAULT_DNS_TIMEOUT=180
    export ACME_RETRY=10
    export ACME_SLEEP=15
    {{ acme_home }}/.acme.sh/acme.sh --server letsencrypt --issue --dns dns_gd -d {{ inventory_hostname }}
  become_user: "{{ acme_user }}"
  args:
    creates: "{{ acme_home }}/.acme.sh/{{ inventory_hostname }}_ecc/fullchain.cer"
  when: hostvars[inventory_hostname].gd_key is defined

- name: Install renewal service
  template:
    src: acme-renew.service.j2
    dest: /etc/systemd/system/acme-renew.service

- name: Install renewal timer
  template:
    src: acme-renew.timer.j2
    dest: /etc/systemd/system/acme-renew.timer

- name: Enable renewal timer
  systemd:
    name: acme-renew.timer
    enabled: yes
    state: started