---

- name: "System compatibility checks"
  assert:
    that:
      - ansible_distribution == "Debian"
      - ansible_distribution_major_version is version('9', '>=')
    msg: only compatible with Debian 9+

- name: certbot package is installed
  apt:
    name: certbot
    state: latest

- include: acme-challenge.yml

- name: Deploy hooks are present
  copy:
    src: hooks/
    dest: /etc/letsencrypt/renewal-hooks/deploy/
    mode: "0700"
    owner: root
    group: root