ansible plays for docker, haproxy & varnish

ansible/roles/certbot/tasks/install.yml

@@ -0,0 +1,8 @@
+---
+- apt:
+    update_cache: true
+  when: ansible_facts.os_family == "Debian"
+
+- package:
+    name: "{{ certbot_packages }}"
+    state: present

ansible/roles/certbot/tasks/main.yml

@@ -0,0 +1,3 @@
+---
+- import_tasks: install.yml
+- import_tasks: secrets.yml

ansible/roles/certbot/tasks/secrets.yml

@@ -0,0 +1,14 @@
+---
+- file:
+    path: "{{ certbot_cloudflare_secrets_dir }}"
+    state: directory
+    owner: root
+    group: root
+    mode: "0700"
+
+- template:
+    src: cloudflare.ini.j2
+    dest: "{{ certbot_cloudflare_ini_path }}"
+    owner: root
+    group: root
+    mode: "0600"