---
################################################################################
# Created Date: Sunday December 21st 2025
# Author: Aaron Johnson aaron.johnson@akamai.com
# -----
# Last Modified: Tuesday, 24th February 2026
# Modified By: the engineer formerly known as Aaron Johnson
# -----
# Copyright (c) 2025 Contact Author for details
# -----
# USAGE/DOCUMENTATION:
# 
# -----
# INSTALLATION
# 
# -----
# HISTORY:
# Date      	By	Comments
# ----------	---	---------------------------------------------------------
################################################################################

- name: Install certificate
  become_user: "{{ acme_user }}"
  shell: |
    {{ acme_sh_path }} --install-cert \
      -d {{ inventory_hostname }} \
      --key-file {{ cert_dir }}/privkey.pem \
      --fullchain-file {{ cert_dir }}/fullchain.pem \
      --reloadcmd "chmod 640 {{ cert_dir }}/privkey.pem {{ cert_dir }}/fullchain.pem && sudo /bin/systemctl reload {{ apache_service }}"
  args:
    creates: "{{ cert_dir }}/fullchain.pem"