register: acme_cert_dir

- name: Pre-copy cert files

  ansible.builtin.copy:

    src: "/etc/ssl/certs/ssl-cert-snakeoil.pem"

    dest: "/etc/ssl/certs/ssl-{{ item }}-{{ domain_name }}.pem"

    mode: '644'

    - cert

    - ca

    - fullchain

- name: Pre-copy key file

  ansible.builtin.copy:

    src: "/etc/ssl/private/ssl-cert-snakeoil.key"

    dest: "/etc/ssl/private/ssl-cert-{{ domain_name }}.pem"

    mode: '640'

    owner: 'root'

    group: 'ssl-cert'

  become: true

- name: Issue certificate

  ansible.builtin.command:

    cmd: "/root/.acme.sh/acme.sh --issue --keylength ec-384

      -w /var/www/acme_root/ {{ all_domain_names }}"

  become: true

  register: cert_issued

  changed_when: cert_issued.rc == 0

- name: Deploy certs and keys