run.yml

@@ -6,14 +6,6 @@
   roles:
     - freeipa_le_ca
 
-- name: Update IPA certs
-  hosts: ipaserver:ipareplicas
-  become: yes
-  tasks:
-    - name: Update IPA certs
-      ansible.builtin.shell: ipa-certupdate
-      changed_when: False
-
 - name: Install ssl-refresher
   hosts: ipaserver:ipareplicas
   become: yes
@@ -27,6 +19,9 @@
   hosts: ipaserver:ipareplicas
   become: yes
   tasks:
+    - name: Update IPA certs
+      ansible.builtin.shell: ipa-certupdate
+      changed_when: False
     - name: Put cert in httpd config
       ansible.builtin.lineinfile:
         path: "/etc/httpd/conf.d/ssl.conf"