---

{{ radius_cn }} {{ radius_hostname }}:
- mode: dns.nsupdate
  nsupdate_server: {{ acme_dnskey_server }}
  nsupdate_keyfile: {{ acme_dnskey_file }}
- path: /etc/freeradius/3.0/certs/srv.key
  user: freerad
  group: freerad
  perm: '400'
  format: key
  action: '/usr/sbin/service freeradius restart'
- path: /etc/freeradius/3.0/certs/srv.crt
  user: freerad
  group: freerad
  perm: '400'
  format: crt,ca
  action: '/usr/sbin/service freeradius restart'