From 65aa543a1e5b8b9314cb8dad86977dd349992f72 Mon Sep 17 00:00:00 2001
From: Beth <ejparker@actcur.com>
Date: Sat, 29 Mar 2025 22:09:08 -0500
Subject: [PATCH] deploy/trigger le setup script only if certbot is set up

---
 tasks/main.yml | 17 ++++++++++++-----
 1 file changed, 12 insertions(+), 5 deletions(-)

diff --git a/tasks/main.yml b/tasks/main.yml
index 0ecb4f2..bbd4dbe 100644
--- a/tasks/main.yml
+++ b/tasks/main.yml
@@ -25,11 +25,6 @@
     src: files/replicate.sh
     dest: /scripts/replicate.sh
 
-- name: deploy letsencrypt setup script
-  ansible.builtin.copy:
-    src: files/setup-le.sh
-    dest: /scripts/setup-le.sh
-
 #this should be moved to dedicated selinux role down the road
 - name: Disable SELinux
   ansible.posix.selinux:
@@ -46,6 +41,18 @@
   register: result2
   ignore_errors: true
 
+- name: deploy letsencrypt setup script
+  ansible.builtin.copy:
+    src: files/setup-le.sh
+    dest: /scripts/setup-le.sh
+  when: (result is succeeded) and (result2 is succeeded)
+
+- name: run letsencrypt setup script
+  ansible.builtin.script:
+    cmd: /scripts/setup-le.sh
+  when: (result is succeeded) and (result2 is succeeded)
+
+
 - name: create symlink for certificate
   ansible.builtin.file:
     src: "/etc/letsencrypt/live/{{ansible_fqdn}}/cert.pem"