---

# TODO DANE TLSA
# Test with https://check.sidnlabs.nl/dane/

- name: Issue certificate for {{ certificate_name }}
  command:
    cmd: >-
      certbot certonly
      --non-interactive
      --cert-name {{ certificate_name | quote }}
      {% if acme_must_staple %}--must-staple{% endif %}
      --disable-hook-validation
      --post-hook {{ ( '(' + (all_reload_commands | join(') && (')) + ')' ) | quote }}
      {% for d in domains %}
      --domain {{ d | quote }}
      {% endfor %}
    creates: "{{ acme_certificate_location }}"
  tags:
    - certificate