---
- name: Install certbot and RFC2136 plugin
  apt:
    update_cache: true
    name:
      - certbot
      - python3-certbot-dns-rfc2136
    state: present
  register: apt_result
  retries: 3
  until: apt_result is succeeded

- name: Add DNS credentials
  template:
    src: letsencrypt/rfc2136.ini.j2
    dest: /etc/letsencrypt/rfc2136.ini
    mode: 0600
    user: root

- name: Add Certbot configuration
  template:
    src: letsencrypt/conf.d/wildcard.ini.j2
    dest: /etc/letsencrypt/conf.d/wildcard.ini
    mode: 0644