ansible-config/roles/certsync/templates/certsync.j2

#!/bin/bash

PATH="/bin:/usr/bin:/sbin:/usr/sbin"
CERT_DIR="{{ certsync_dir }}"

if [ ! -d $CERT_DIR ]; then
  mkdir -p $CERT_DIR
  chown root.root $CERT_DIR
  chmod 750 $CERT_DIR
fi

sftp -p -q -i {{ certsync_key }} certsync@{{ certsync_host }}:* "$CERT_DIR/" > /dev/null 2>&1
if [ $? -ne 0 ]; then
  echo "Error getting certificates"
  exit 1
fi
chown root.root $CERT_DIR/*
chmod 440 $CERT_DIR/*

COUNT=$(find $CERT_DIR -mtime -7 | wc -l)
if [ $COUNT -gt 0 ]; then
  service nginx reload > /dev/null
fi