feat(pb): removes TLS certificates after the distribution

2026-09-16 09:41:32 +04:00
parent e20776a571
commit 9627a4a5e0
1 changed files with 16 additions and 0 deletions
@@ -31,3 +31,19 @@
  roles:
    # Pull certificates from cert_proxy and distribute them among the servers
    - ../roles/update_certificates
+
+  post_tasks:
+    - name: Delete certificates from cert-proxy
+      ansible.builtin.file:
+        name: /tmp/letsencrypt
+        state: absent
+      when: "inventory_hostname == 'cert-proxy'"
+      run_once: true
+
+    - name: Delete certificates from ansible-server
+      ansible.builtin.file:
+        name: /tmp/letsencrypt
+        state: absent
+      run_once: true
+      delegate_to: 127.0.0.1
+