roles/update_certificates/tasks/main.yaml

@@ -1,20 +1,23 @@
 ---
-- name: Fetch all certificates from cert-proxy
-  ansible.builtin.fetch:
+- name: Pull directory from remote host to control node
+  ansible.posix.synchronize:
+    mode: pull
     src: /tmp/letsencrypt
-    dest: /tmp
-    when: "{{ inventory_hostname == 'cert-proxy' }}"
+    dest: /tmp 
+    recursive: true
+    delete: true
+  when: "inventory_hostname == 'cert-proxy'"
 
 - name: Push loki.vmn.su certificate to the target
   ansible.builtin.copy:
     src: /tmp/letsencrypt/live/loki.vmn.su/fullchain.pem
     dest: /etc/nginx/certs/loki_fullchain.pem
     local_follow: true
-    when: "{{ inventory_hostname == 'monitoring' }}"
+  when: "inventory_hostname == 'monitoring'"
 
 - name: Push loki.vmn.su key to the target
   ansible.builtin.copy:
     src: /tmp/letsencrypt/live/loki.vmn.su/privkey.pem
     dest: /etc/nginx/certs/loki_privkey.pem
     local_follow: true
-    when: "{{ inventory_hostname == 'monitoring' }}"
+  when: "inventory_hostname == 'monitoring'"