Better support SSL certinficates in the frontend role

roles/frontend/tasks/main.yml

@@ -8,10 +8,10 @@
     owner: www-data
     group: www-data
 
-- name: Install nginx site files
+- name: Install nginx site cdn
   template:
-    src: files.j2
-    dest: /etc/nginx/sites-available/files
+    src: cdn.j2
+    dest: /etc/nginx/sites-available/cdn
   notify: restart nginx
 
 - name: Install nginx mastodon config
@@ -20,10 +20,10 @@
     dest: /etc/nginx/sites-available/mastodon
   notify: restart nginx
 
-- name: Enable files
+- name: Enable cdn
   file:
-    src: /etc/nginx/sites-available/files
-    dest: /etc/nginx/sites-enabled/files
+    src: /etc/nginx/sites-available/cdn
+    dest: /etc/nginx/sites-enabled/cdn
     state: link
 
 - name: Enable mastodon
@@ -43,13 +43,36 @@
     dest: /etc/nginx/dmca
   notify: restart nginx
 
+- name: Prep SSL directory
+  file:
+    path: /etc/nginx/ssl
+    state: directory
+    owner: www-data
+    group: www-data
+
+- name: Install mastodon domain SSL certificate
+  template:
+    src: domain.fullchain.pem
+    dest: /etc/nginx/ssl/domain.fullchain.pem
+
+- name: Install mastodon domain ssl key
+  template:
+    src: domain.privkey.pem
+    dest: /etc/nginx/ssl/domain.privkey.pem
+
+- name: Install mastodon CDN SSL certificate
+  template:
+    src: cdn.fullchain.pem
+    dest: /etc/nginx/ssl/cdn.fullchain.pem
+
+- name: Install mastodon CDN ssl key
+  template:
+    src: cdn.privkey.pem
+    dest: /etc/nginx/ssl/cdn.privkey.pem
+
 - name: Copy cloudflare
   template:
     src: cloudflare
     dest: /etc/nginx/cloudflare
   notify: restart nginx
 
-- name: install certbot
-  package:
-    name: python3-certbot-nginx
-    state: present