---
# Certbot
#
# Linux-Server-Admin.com Ansible Role for cert management with Certbot
#
# Install Tasks
#

- name: Install EPEL Release
  ansible.builtin.package:
   name: "epel-release"
   state: latest
   update_cache: true
  when: ansible_facts["os_family"] == "RedHat"
  become: true

- name: Install Certbot
  ansible.builtin.package:
   name: "certbot"
   state: latest
   update_cache: true
  become: true

- name: Install Certbot's Nginx/Apache package
  ansible.builtin.package:
   name: "{{ certbot_python }}"
   state: latest
  when:
    - not certbot_freeipa | default(false) | bool
    - certbot_webserver is defined
    - certbot_webserver_plugin_install | default(true) | bool
  become: true