---

- name: Ensure OpenSSL installed (RedHat)
  yum:
    name:
      - openssl
    state: present
    update_cache: no
  when: "matrix_ssl_retrieval_method == 'self-signed' and ansible_os_family == 'RedHat'"

- name: Ensure APT usage dependencies are installed (Debian)
  apt:
    name:
      - openssl
    state: present
    update_cache: no
  when: "matrix_ssl_retrieval_method == 'self-signed' and ansible_os_family == 'Debian'"

- name: Generate self-signed certificates
  include_tasks: "{{ role_path }}/tasks/ssl/setup_ssl_self_signed_obtain_for_domain.yml"
  with_items: "{{ domains_requiring_certificates }}"
  loop_control:
    loop_var: domain_name
  when: "matrix_ssl_retrieval_method == 'self-signed'"