---
- name: add certbot repo
  apt_repository:
    repo: ppa:certbot/certbot
- name: install certbot
  apt:
    name: python-certbot-apache
    state: latest
    update_cache: yes
- name: Copy LetsEncrypt apache config
  template:
    src: etc/letsencrypt/options-ssl-apache.conf.j2
    dest: /etc/letsencrypt/options-ssl-apache.conf
    owner: root
    group: root
    mode: 0644