---
- name: Install certbot and RFC2136 plugin
  apt:
    update_cache: true
    name:
      - certbot
      - python3-certbot-dns-rfc2136
  register: pkg_result
  retries: 3
  until: pkg_result is succeeded

- name: Create /etc/letsencrypt/conf.d
  file:
    path: /etc/letsencrypt/conf.d
    state: directory
    mode: 0755

- name: Lookup DNS masters IPv4
  set_fact:
    dns_masters_ipv4:
      - "10.128.0.30"
    cacheable: true

- name: Add DNS credentials
  template:
    src: letsencrypt/rfc2136.ini.j2
    dest: /etc/letsencrypt/rfc2136.ini
    mode: 0600
    owner: root

- name: Add Certbot configuration
  template:
    src: "letsencrypt/conf.d/certname.ini.j2"
    dest: "/etc/letsencrypt/conf.d/{{ certbot.certname }}.ini"
    mode: 0644
  notify:
    - Generate certificates
    - Reload nginx