Allow to use SSL keypair given by path only

README.md

@@ -50,7 +50,12 @@ Content of SSL/TLS certificate (**required**).
 ```yaml
 zammad_ssl_key:
 ```
-Content of SSL/TLS private key (**required**).
+Content of SSL/TLS private key (**required**).  
+**Please note:** In the special case, that you previously put an SSL keypair
+on the host, e.g. via Let's Encrypt, you must not configure the variables
+`zammad_ssl_cert` and `zammad_ssl_key`. Nevertheless, in each case the role will
+alidate, if the SSL key pair given under the paths `zammad_ssl_key_path` and
+`zammad_ssl_cert_path` are valid.
 
 ```yaml
 zammad_nginx_additional_server_configs:

defaults/main.yml

@@ -7,9 +7,6 @@ zammad_nginx_config_path: "/etc/nginx/sites-available/zammad.conf"
 zammad_ssl_cert_path: "/etc/ssl/certs/zammad_cert.pem"
 zammad_ssl_key_path: "/etc/ssl/private/zammad_key.pem"
 
-zammad_ssl_key:
-zammad_ssl_cert:
-
 zammad_nginx_additional_server_configs: []
 
 elasticsearch_url: "http://localhost:9200"

tasks/ssl.yml

@@ -9,6 +9,7 @@
     mode: 0640
     owner: root
     group: root
+  when: zammad_ssl_key is undefined or zammad_ssl_key|length > 0
 
 - name: SSL | Insert certificate
   blockinfile:
@@ -19,6 +20,7 @@
     mode: 0644
     owner: root
     group: root
+  when: zammad_ssl_cert is undefined or zammad_ssl_cert|length > 0
 
 - name: SSL | Check if certificate is still valid, ignoring failures
   openssl_certificate_info: