From 25384e29462f4b05a3dbfbe0547442c755a943fc Mon Sep 17 00:00:00 2001
From: Jonathan DeMasi <me@jthan.io>
Date: Fri, 6 Feb 2026 21:51:38 -0700
Subject: [PATCH] one more copy

---
 ansible/roles/nginx/tasks/main.yaml | 11 ++++++++++-
 1 file changed, 10 insertions(+), 1 deletion(-)

diff --git a/ansible/roles/nginx/tasks/main.yaml b/ansible/roles/nginx/tasks/main.yaml
index 9b3bda3..9a3875b 100644
--- a/ansible/roles/nginx/tasks/main.yaml
+++ b/ansible/roles/nginx/tasks/main.yaml
@@ -42,6 +42,16 @@
     remote_src: true
   when: nginx_ssl_enabled
 
+- name: Copy SSL issuer certificate into place for SSL enabled nginx server
+  copy:
+    src: /root/.lego/certificates/{{ inventory_hostname }}.issuer.crt
+    dest: /etc/nginx/ssl/{{ inventory_hostname }}.issuer.crt
+    owner: nginx
+    group: nginx
+    mode: 0600
+    remote_src: true
+  when: nginx_ssl_enabled
+
 - name: Copy SSL key into place for SSL enabled nginx server
   copy:
     src: /root/.lego/certificates/{{ inventory_hostname }}.key
@@ -52,7 +62,6 @@
     remote_src: true
   when: nginx_ssl_enabled
 
-
 - name: Create web root
   file:
     path: /srv/http/{{ inventory_hostname }}/html