---
- name: Install Apache2
  ansible.builtin.apt:
    name: apache2
    state: present
    update_cache: true

- name: Install Certbot and Apache plugin
  ansible.builtin.apt:
    name:
      - certbot
      - python3-certbot-apache
    state: present

- name: Ensure site root exists
  ansible.builtin.file:
    path: "{{ httpd_site_root }}"
    state: directory
    owner: www-data
    group: www-data
    mode: '0755'