---
- name: Pull directory from remote host to control node
  ansible.posix.synchronize:
    mode: pull
    src: /tmp/letsencrypt
    dest: /tmp 
    recursive: true
    delete: true
  when: "inventory_hostname == 'cert-proxy'"

- name: Push loki.vmn.su certificate to the target
  ansible.builtin.copy:
    src: /tmp/letsencrypt/live/loki.vmn.su/fullchain.pem
    dest: /etc/nginx/certs/loki_fullchain.pem
    local_follow: true
  when: "inventory_hostname == 'monitoring'"

- name: Push loki.vmn.su key to the target
  ansible.builtin.copy:
    src: /tmp/letsencrypt/live/loki.vmn.su/privkey.pem
    dest: /etc/nginx/certs/loki_privkey.pem
    local_follow: true
  when: "inventory_hostname == 'monitoring'"