---

- name: Create /etc/di/certs directory
  file:
    path: "/etc/di/cert"
    owner: "di"
    group: "di-config"
    mode: "0750"
    state: directory

- name: Copy required certs
  copy:
    src: "{{ item }}"
    dest: "/etc/di/cert/{{ item }}"
    owner: "di"
    group: "di-config"
    mode: "0640"
  with_items:
    - "dualinventive_key_nopw.pem"
    - "dualinventive_combined.pem"