---
- name: Create nginx certificates directory
  file:
    path: /etc/nginx/certs
    state: directory
    owner: root
    group: root
    mode: "0444"
  tags:
    - role::nginx-cloudflare-mtls

- name: Copy the cloudflare mutual TLS certificate
  copy:
    src: cloudflare.crt
    dest: /etc/nginx/certs/cloudflare.crt
    owner: root
    group: root
    mode: "0444"
  tags:
    - role::nginx-cloudflare-mtls