---

- name: copy ca certificate
  copy:
    src: "/srv/ca/certs/ca.crt"
    dest: "/etc/pki/tls/certs/ca.crt"
    mode: 0644
    owner: root
    group: root

- name: copy host certificate
  copy:
    src: "/srv/ca/certs/{{ inventory_hostname }}.crt"
    dest: "/etc/pki/tls/certs/{{ inventory_hostname }}.crt"
    mode: 0644
    owner: root
    group: root

- name: copy host key
  copy:
    src: "/srv/ca/private/{{ inventory_hostname }}.key"
    dest: "/etc/pki/tls/private/{{ inventory_hostname }}.key"
    mode: 0600
    owner: root
    group: root