---
# The home-server project produces a multi-purpose setup using Ansible.
# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
# Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.

- name: ensure /srv/acme exists
  file:
    path: /srv/acme
    state: directory
    mode: 01777

- name: let nginx serve ACME requests
  copy:
    content: |
      location ^~ /.well-known/acme-challenge {
        alias /srv/acme;
      }
    dest: /etc/nginx/inc.d/acme.http.inc
    mode: 0440
    owner: http
    group: http
  notify:
    - restart nginx.service

### LOCAL COMMIT ⇒ ###
- name: commit local changes
  include_role: name=etckeeper.inc allow_duplicates=true tasks_from=local.yml
  vars:
    msg: ACME
### ⇐ LOCAL COMMIT ###
- meta: flush_handlers