From b6132e87209a12f1b566c3c884efe34c6cbe901a Mon Sep 17 00:00:00 2001
From: Markus Hauschild <markus@moepman.eu>
Date: Sat, 9 Sep 2017 11:25:16 +0200
Subject: [PATCH] Fetch letsencrypt root cert for certmgr.

---
 roles/certmgr/tasks/main.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/roles/certmgr/tasks/main.yml b/roles/certmgr/tasks/main.yml
index 1ee3dfd..f8bf19d 100644
--- a/roles/certmgr/tasks/main.yml
+++ b/roles/certmgr/tasks/main.yml
@@ -32,6 +32,9 @@
   - /etc/acme/account.key
   - /etc/acme/server.key
 
+- name: Download Lets Encrypt CA certificate
+  get_url: url=https://letsencrypt.org/certs/lets-encrypt-x3-cross-signed.pem dest=/etc/acme/lets-encrypt-x3-cross-signed.pem
+
 - name: Create challenge directory
   file: path=/var/www/acme-challenge/ owner=root mode=0755 state=directory