- name: ensure relevant packages are installed
  ansible.builtin.apt:
    name:
      - openssl
      - certbot
      - jq
    state: present
  become: true

- name: ensure manual auth scripts are deployed
  block:
    - name: ensure manual auth scripts directory exists
      ansible.builtin.file:
        path: "/usr/local/lib/ansible_certbot/manual_auth_scripts"
        state: directory
        owner: root
        group: root
        mode: "0755"
      become: true

    - name: ensure manual auth scripts are deployed
      ansible.builtin.copy:
        src: "manual_auth_scripts/{{ item }}.sh"
        dest: "/usr/local/lib/ansible_certbot/manual_auth_scripts/{{ item }}.sh"
        owner: root
        group: root
        mode: "0754"
      become: true
      loop:
        - "dns-01-acme-dns"