---
- name: add rt http site
  template:
    src: etc/apache2/sites-available/ansible_domain.conf.j2
    dest: /etc/apache2/sites-available/{{ rt_domain }}.conf
    owner: root
    group: root
    mode: 0644
    force: no
  register: rt_http
- name: disable default site and enable rt site
  block:
    - name: disable default site
      command:
        cmd: a2dissite 000-default.conf
        removes: /etc/apache2/sites-enabled/000-default.conf
    - name: enable rt site
      command:
        cmd: a2ensite {{ rt_domain }}.conf
        creates: /etc/apache2/sites-enabled/{{ rt_domain }}.conf
- name: run certbot
  command:
    cmd: certbot --apache --non-interactive --keep-until-expiring --no-eff-email --email {{ admin_mail }} --redirect --renew-with-new-domains --agree-tos -d {{ rt_domain }}
  when: ansible_domain != 'dev' and rt_http.changed
- include: ssl-dev.yml
  when: ansible_domain == 'dev'
- name: add rt https site
  template:
    src: etc/apache2/sites-available/ansible_domain-le-ssl.conf.j2
    dest: /etc/apache2/sites-available/{{ rt_domain }}-le-ssl.conf
    owner: root
    group: root
    mode: 0644
- name: enable rt https site
  command:
    cmd: a2ensite {{ rt_domain }}-le-ssl.conf
    creates: /etc/apache2/sites-enabled/{{ rt_domain }}-le-ssl.conf
  notify: restart apache