---
# ansible/cert.yml
# Installs uacme and manages certificates as the unprivileged `acme` user
#
# Registration is interactive and must be done by hand once: see the debug
# message this playbook prints
#
#   ansible-playbook -i inventory/hosts.yml cert.yml --ask-become-pass

- name: Provision ACME certificates
  hosts: vps
  become: yes
  become_method: doas
  force_handlers: true
  vars_files:
    - vars/vhosts.yml

  roles:
    - uacme