tasks

---

- name: Create a directory for LE CA certs

  ansible.builtin.file:

    path: /tmp/letsencrypt

    state: directory

    mode: '0750'

- name: Download LE CA certs

  ansible.builtin.get_url:

    url: "https://letsencrypt.org/certs/{{ item }}"

    dest: "/tmp/letsencrypt/{{ item }}"

    mode: '0640'

  with_items: "{{ le_ca_certs | list }}"

- name: Install LE CA certs

  ansible.builtin.shell: ipa-cacert-manage install "/tmp/letsencrypt/{{ item }}"

  changed_when: False

  with_items: "{{ le_ca_certs | list }}"

- name: Delete directory for LE CA certs

  ansible.builtin.file:

    path: /tmp/letsencrypt

    state: absent

- name: Update IPA certs

  ansible.builtin.shell: ipa-certupdate

  changed_when: False