ffdo-ansible/roles/service-prometheus/tasks/nginx.yml

---
- name: Ensure nginx configuration is up to date
  become: yes
  template:
    src: "prometheus_nginx.conf.j2"
    dest: "/etc/nginx/sites-available/prometheus.conf"
  notify: Reload nginx

- name: Ensure nginx is running
  become: yes
  service:
    name: nginx
    state: started

- stat:
    path: "/var/lib/acme/live/{{ prometheus_domain }}/privkey"
  become: yes
  register: prometheus_key_file_stat

- name: Let acmetool generate a key and a certificate
  become: yes
  when: not prometheus_key_file_stat.stat.exists
  shell: /usr/bin/acmetool want --batch {{ prometheus_domain }}
  notify: Restart nginx


- name: Ensure prometheus configuration for nginx is enabled
  become: yes
  file: 
    state: link
    dest: /etc/nginx/sites-enabled/prometheus.conf
    src: /etc/nginx/sites-available/prometheus.conf 
  notify: Reload nginx