From 1f15d6f886d5a1b2d4d82ca4f0f14a8d312859e5 Mon Sep 17 00:00:00 2001
From: Matthew Wild <mwild1@gmail.com>
Date: Fri, 21 Feb 2020 16:44:07 +0000
Subject: [PATCH] Ensure letsencrypt has permission to write to .well-known

---
 ansible/tasks/certs.yml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/ansible/tasks/certs.yml b/ansible/tasks/certs.yml
index 4be0862..329e3e4 100644
--- a/ansible/tasks/certs.yml
+++ b/ansible/tasks/certs.yml
@@ -24,3 +24,10 @@
     group: letsencrypt
     system: yes
     home: /snikket/letsencrypt
+- name: Create directory for challenges
+  file:
+    state: directory
+    path: /var/www/.well-known
+    owner: letsencrypt
+    group: letsencrypt
+    mode: 0755