From 9627a4a5e044482541fdb60bcc9db267e7fd3c69 Mon Sep 17 00:00:00 2001 From: Maxim Vershinin Date: Wed, 16 Sep 2026 09:41:32 +0400 Subject: [PATCH] feat(pb): removes TLS certificates after the distribution --- playbooks/maintain.yaml | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) diff --git a/playbooks/maintain.yaml b/playbooks/maintain.yaml index b0d2c71..31f0e3d 100644 --- a/playbooks/maintain.yaml +++ b/playbooks/maintain.yaml @@ -31,3 +31,19 @@ roles: # Pull certificates from cert_proxy and distribute them among the servers - ../roles/update_certificates + + post_tasks: + - name: Delete certificates from cert-proxy + ansible.builtin.file: + name: /tmp/letsencrypt + state: absent + when: "inventory_hostname == 'cert-proxy'" + run_once: true + + - name: Delete certificates from ansible-server + ansible.builtin.file: + name: /tmp/letsencrypt + state: absent + run_once: true + delegate_to: 127.0.0.1 +