# deploy_renewal.yml
---
- name: deploy certbot renewal script
  ansible.builtin.copy:
    src: files/certbot-renewal.sh
    dest: /scripts/certbot-renewal.sh
    mode: '0754'

- name: deploy certbot renewal service
  ansible.builtin.copy:
    src: files/certbot-renewal.service
    dest: /usr/lib/systemd/system/certbot-renewal.service
    mode: '0644'

- name: deploy certbot renewal timer
  ansible.builtin.copy:
    src: files/certbot-renewal.timer
    dest: /usr/lib/systemd/system/certbot-renewal.timer
    mode: '0644'

- name: ensure certbot renewal script is running
  service:
    name: certbot-renewal.timer
    state: started
    daemon_reload: true
    enabled: yes