- name: ensure existence of renewal deploy hooks directory
  ansible.builtin.file:
    path: /etc/letsencrypt/renewal-hooks/deploy
    state: directory
    owner: root
    group: root
    mode: "0755"
  become: true

- name: ensure renewal deploy hook commands
  ansible.builtin.template:
    src: renewal_deploy_hook_commands.sh.j2
    dest: /etc/letsencrypt/renewal-hooks/deploy/ansible_commands.sh
    owner: root
    group: root
    mode: "0770"
  become: true