ansible-role-mumble/tasks/self_signed.yml

- name: Install SSL dependencies
  package:
    name:
      - ssl-cert
      - python3-openssl
    state: present
  tags: selfsigned_install

- name: Create SSL config directories
  file:
    path: "{{ config_dir }}"
    state: directory
    owner: root
    group: root
    mode: "755"
  loop:
    - "{{ acme_config_dir }}"
    - "{{ acme_certs_dir }}"
    - "{{ acme_csr_dir }}"
  loop_control:
    loop_var: config_dir
  tags: selfsigned_install

- name: Create ACME private keys directory
  file:
    path: "{{ acme_keys_dir }}"
    state: directory
    owner: root
    group: "{{ acme_ssl_group }}"
    mode: "750"
  tags: acme_install

- name: Install Self-Signed certificate for each domain
  include_tasks: self_signed_domain.yml
  loop: "{{ acme_domains }}"
  loop_control:
    loop_var: domain
    label: "{{ domain.name }}"