---
- name: Fetch all certificates from cert-proxy
  ansible.builtin.fetch:
    src: /tmp/letsencrypt
    dest: /tmp
    when: "{{ inventory_hostname == 'cert-proxy' }}"

- name: Push loki.vmn.su certificate to the target
  ansible.builtin.copy:
    src: /tmp/letsencrypt/live/loki.vmn.su/fullchain.pem
    dest: /etc/nginx/certs/loki_fullchain.pem
    local_follow: true
    when: "{{ inventory_hostname == 'monitoring' }}"

- name: Push loki.vmn.su key to the target
  ansible.builtin.copy:
    src: /tmp/letsencrypt/live/loki.vmn.su/privkey.pem
    dest: /etc/nginx/certs/loki_privkey.pem
    local_follow: true
    when: "{{ inventory_hostname == 'monitoring' }}"