---
- name: Install packages
  ansible.builtin.package:
    name: ktls-utils

- name: Configure tlshd
  ansible.builtin.template:
    dest: /etc/tlshd.conf
    src: tlshd.conf.j2
    mode: "0644"
    owner: root
    group: "{{ ansible_wheel }}"
  notify: Restart tlshd

- name: Configure tlshd private key
  ansible.builtin.copy:
    dest: "{{ tls_private }}/tlshd.key"
    src: "{{ tls_private }}/{{ inventory_hostname }}.key"
    mode: "0600"
    owner: root
    group: "{{ ansible_wheel }}"
    remote_src: true
  tags: certificates
  notify: Restart tlshd

- name: Enable tlshd services
  ansible.builtin.service:
    name: tlshd
    state: started
    enabled: true