feat(role,pb,inv): new role for updating certificates on web-servers

roles/update_certificates/tasks/main.yaml

@@ -0,0 +1,20 @@
+---
+- name: Fetch all certificates from cert-proxy
+  ansible.builtin.fetch:
+    src: /tmp/letsencrypt
+    dest: /tmp
+    when: "{{ inventory_hostname == 'cert-proxy' }}"
+
+- name: Push loki.vmn.su certificate to the target
+  ansible.builtin.copy:
+    src: /tmp/letsencrypt/live/loki.vmn.su/fullchain.pem
+    dest: /etc/nginx/certs/loki_fullchain.pem
+    local_follow: true
+    when: "{{ inventory_hostname == 'monitoring' }}"
+
+- name: Push loki.vmn.su key to the target
+  ansible.builtin.copy:
+    src: /tmp/letsencrypt/live/loki.vmn.su/privkey.pem
+    dest: /etc/nginx/certs/loki_privkey.pem
+    local_follow: true
+    when: "{{ inventory_hostname == 'monitoring' }}"