- name: ensure server certificate is installed
  copy:
    src: certs/{{ cert_src }}
    dest: '{{ cert_dest }}'
    mode: '{{ cert_mode|d("0644") }}'
  notify: certificate changed
- name: ensure server private key is installed
  copy:
    src: certs/{{ cert_key_src }}
    dest: '{{ cert_key_dest }}'
    mode: '{{ cert_key_mode|d("0600") }}'
  diff: false
  notify: certificate changed
  when: cert_key_src is defined