---

{{ pizza_domain }}:
- mode: dns.nsupdate
  nsupdate_server: {{ acme_dnskey_server }}
  nsupdate_keyfile: {{ acme_dnskey_file }}
- path: /etc/nginx/ssl/{{ pizza_domain }}.key
  user: root
  group: root
  perm: '400'
  format: key
  action: '/usr/sbin/service nginx restart'
- path: /etc/nginx/ssl/{{ pizza_domain }}.crt
  user: root
  group: root
  perm: '400'
  format: crt,ca
  action: '/usr/sbin/service nginx restart'