--- - name: HAPROXY -- install hosts: haproxy become: true tasks: - name: HAPROXY -- install needed packages become: true package: state: present name: '{{ item }}' with_items: - unattended-upgrades - haproxy - name: HAPROXY -- Generate Diffie-Hellman parameters with the default size (4096 bits) community.crypto.openssl_dhparam: path: /etc/haproxy/dhparam.pem - name: HAPROXY -- create ssl folder become: true file: path: '/etc/haproxy/ssl' state: directory - name: HAPROXY -- new cert script copy: src: 'files/ha_new_cert.sh' dest: '/usr/local/bin/new_certbot' mode: 0755 - name: HAPROXY -- cert renew script become: true copy: src: 'files/ha_certbot_renew.sh' dest: '/etc/cron.weekly/certbot_renew.sh' mode: 0755 - name: HAPROXY -- config file become: true template: src: files/ha_haproxy.cfg.j2 dest: /etc/haproxy/haproxy.cfg owner: root group: root mode: 0644 tags: - hot notify: - reload haproxy - name: HAPROXY -- install certbot snap become: true snap: name: certbot classic: yes handlers: - name: reload haproxy service: name: haproxy state: reloaded enabled: yes