- name: install and configure nginx
  include_role:
    name: nginx
  vars:
    nginx:
      servers:
        - conf: nginx_crl
          http: true
        - conf: nginx_crl
      certs: true


- name: create crl directory
  file:
    path: "{{ crl_dir }}"
    state: directory
    mode: 0500
    owner: nginx
    group: nginx


- name: generate crls
  include_role:
    name: ca
  vars:
    function: crl
    ca_options:
      path: "{{ crl_dir }}"
      mode: '0400'
      owner: nginx
      group: nginx
    ca_crls:


- name: add directories to backup plan
  include_role:
    name: backup
  vars:
    function: add
    backup_items:
      - "{{ crl_dir }}"