ocserv: reload service on certificate renewal

roles/ocserv/tasks/main.yml

@@ -53,6 +53,12 @@
   loop: '{{ vpn.routes | dict2items }}'
   notify: restart ocserv
 
+- name: Install certificate renewal deployment hook
+  copy:
+    dest: /etc/letsencrypt/renewal-hooks/deploy/
+    src: reload-ocserv.sh
+    mode: 0755
+
 - name: Create ocserv service override directory
   file:
     path: /etc/systemd/system/ocserv.service.d