ocserv: reload service on certificate renewal

roles/ocserv/files/reload-ocserv.sh

@@ -0,0 +1,3 @@
+#!/bin/sh
+
+/sbin/service ocserv reload

roles/ocserv/tasks/main.yml

@@ -53,6 +53,12 @@
   loop: '{{ vpn.routes | dict2items }}'
   notify: restart ocserv
 
+- name: Install certificate renewal deployment hook
+  copy:
+    dest: /etc/letsencrypt/renewal-hooks/deploy/
+    src: reload-ocserv.sh
+    mode: 0755
+
 - name: Create ocserv service override directory
   file:
     path: /etc/systemd/system/ocserv.service.d