use fullchain certificates for nginx

roles/nginx/site/tasks/main.yml

@@ -29,26 +29,14 @@
     - "/srv/ca/private/{{ inventory_hostname }}.key"
   notify: restart nginx
 
-- name: "copy site certificate chain for {{ site }}"
-  copy:
-    src: "{{ item }}"
-    dest: "{{ tls_certs }}/{{ site }}-chain.crt"
-    mode: 0644
-    owner: root
-    group: "{{ ansible_wheel }}"
-  with_first_found:
-    - "/srv/letsencrypt/live/{{ site }}/chain.pem"
-    - "/srv/ca/certs/ca.crt"
-  notify: restart nginx
-
 - name: "copy site certificate for {{ site }}"
   copy:
     src: "{{ item }}"
-    dest: "{{ tls_certs }}/{{ site }}.crt"
+    dest: "{{ tls_certs }}/{{ site }}-fullchain.crt"
     mode: 0644
     owner: root
     group: "{{ ansible_wheel }}"
   with_first_found:
-    - "/srv/letsencrypt/live/{{ site }}/cert.pem"
+    - "/srv/letsencrypt/live/{{ site }}/fullchain.pem"
     - "/srv/ca/certs/{{ inventory_hostname }}.crt"
   notify: restart nginx