tasks/main.yml

@@ -2,23 +2,18 @@
 
 - name: Create a directory for LE CA certs
   ansible.builtin.file:
-    path: /tmp/letsencrypt
+    path: /var/tmp/freeipa_le_ca
     state: directory
     mode: '0750'
 
 - name: Download LE CA certs
   ansible.builtin.get_url:
     url: "https://letsencrypt.org/certs/{{ item }}"
-    dest: "/tmp/letsencrypt/{{ item }}"
+    dest: "/var/tmp/freeipa_le_ca/{{ item }}"
     mode: '0640'
   with_items: "{{ le_ca_certs | list }}"
 
 - name: Install LE CA certs
-  ansible.builtin.shell: ipa-cacert-manage install "/tmp/letsencrypt/{{ item }}"
+  ansible.builtin.shell: ipa-cacert-manage install "/var/tmp/freeipa_le_ca/{{ item }}"
   changed_when: False
   with_items: "{{ le_ca_certs | list }}"
-
-- name: Delete directory for LE CA certs
-  ansible.builtin.file:
-    path: /tmp/letsencrypt
-    state: absent