---
- name: Symlink radius certificates
  file:
    src: /etc/letsencrypt/live/crans.org/{{ item }}
    dest: /etc/freeradius/3.0/certs/letsencrypt/{{ item }}
    state: link
    force: yes
  loop:
    - fullchain.pem
    - privkey.pem

- name: Set permissions on certificates
  file:
    path: /etc/letsencrypt/{{ item }}
    group: freerad
    mode: '0755'
    recurse: yes
  loop:
    - live
    - archive