---
- block:
  - name: Create the acme hooks directory if it does not yet exist
    file: dest={{ letsencrypt_acme_sh_services_scripts_dir }} state=directory owner=root group=root

  - name: Install a script that fix the letsencrypt certificate for haproxy and then reloads the service
    template: src=haproxy-letsencrypt-acme.sh.j2 dest={{ letsencrypt_acme_sh_services_scripts_dir }}/haproxy owner=root group=root mode=4555

  - name: Create the haproxy PKI directory
    file:
      dest: /etc/pki/haproxy
      state: directory
      owner: root
      group: "{%if not haproxy_docker_container %}haproxy{% else %}root{% endif %}"
      mode: "0750"

  - name: Run the letsencrypt hook once, to create the certificate chain that haproxy will use
    shell: "{{ letsencrypt_acme_sh_services_scripts_dir }}/haproxy"
    args:
      creates: '{{ pki_dir }}/haproxy/haproxy.pem'

  when: letsencrypt_acme_install
  tags: [ 'haproxy', 'letsencrypt', 'letsencrypt_acme_sh', 'haproxy_letsencrypt' ]