---
- name: Ensure Prole SSL directory exists
  ansible.builtin.file:
    path: "{{ prole_ssl_dest_dir }}"
    state: directory
    owner: root
    group: root
    mode: '0755'

- name: Check which SSL source files exist on controller
  ansible.builtin.stat:
    path: "{{ prole_ssl_src_dir }}/{{ item }}"
  loop: "{{ prole_ssl_files }}"
  register: prole_ssl_stat
  delegate_to: localhost

- name: Warn about missing SSL source files
  ansible.builtin.debug:
    msg: "WARNING: SSL source file not found on controller, skipping: {{ item.item }}"
  loop: "{{ prole_ssl_stat.results }}"
  when: not item.stat.exists

- name: Deploy Prole SSL files
  ansible.builtin.copy:
    src: "{{ prole_ssl_src_dir }}/{{ item.item }}"
    dest: "{{ prole_ssl_dest_dir }}/{{ item.item }}"
    owner: root
    group: root
    mode: "{{ '0600' if (item.item | regex_search('\\.key$')) else '0644' }}"
  loop: "{{ prole_ssl_stat.results }}"
  when: item.stat.exists