Add OAuth client ID and secret for Athena to titania.incus.yml

ansible/certbot/deploy.yml

@@ -275,6 +275,22 @@
       loop_control:
         label: "{{ item.item.cert_name }}"
 
+    - name: Check if HAProxy PEM exists
+      become: true
+      ansible.builtin.stat:
+        path: "{{ haproxy_cert_path }}"
+      register: _haproxy_pem_check
+      when: haproxy_cert_path is defined
+
+    - name: Ensure HAProxy PEM is current
+      become: true
+      ansible.builtin.command: "{{ certbot_directory }}/hooks/renewal-hook.sh"
+      environment:
+        RENEWED_LINEAGE: "{{ certbot_directory }}/config/live/{{ _certbot_certs[0].cert_name }}"
+      when:
+        - haproxy_cert_path is defined
+        - not (_haproxy_pem_check.stat.exists | default(false))
+
     # -------------------------------------------------------------------------
     # Systemd Timer for Auto-Renewal
     # -------------------------------------------------------------------------