ansible-role-postgresql/tasks/postgresql-letsencrypt-acmetool.yml

---
- block:
    - name: Create the acme hooks directory if it does not yet exist
      file: dest={{ letsencrypt_acme_services_scripts_dir }} state=directory owner=root group=root

    - name: Install a script that fix the letsencrypt certificate for postgresql and then restarts the service
      template: src=postgresql-letsencrypt-acme.sh.j2 dest={{ letsencrypt_acme_services_scripts_dir }}/postgresql owner=root group=root mode=4555

  when:
    - postgresql_letsencrypt_managed
    - letsencrypt_acme_install
  tags: [ 'postgresql', 'postgres', 'letsencrypt', 'pg_acme_hook' ]


- block:
    - name: Remove the letsencrypt certificate hook for postgresql
      file: dest=/usr/lib/acme/hooks/postgresql state=absent

  when:
    - not postgresql_letsencrypt_managed
  tags: [ 'postgresql', 'postgres', 'letsencrypt', 'pg_acme_hook' ]