From ea7d079f27e020c104d9ff1a6e5b0965467228bc Mon Sep 17 00:00:00 2001
From: Ryan Blundon <ryan.blundon@protonmail.com>
Date: Sat, 14 Mar 2026 22:30:18 -0500
Subject: [PATCH] update step playbook

---
 .../playbooks/roles/step-ca/tasks/main.yml    | 26 ++++++++++++-------
 1 file changed, 17 insertions(+), 9 deletions(-)

diff --git a/ansible/playbooks/roles/step-ca/tasks/main.yml b/ansible/playbooks/roles/step-ca/tasks/main.yml
index 39ba76a..0b037cc 100644
--- a/ansible/playbooks/roles/step-ca/tasks/main.yml
+++ b/ansible/playbooks/roles/step-ca/tasks/main.yml
@@ -36,6 +36,23 @@
   no_log: true
   notify: restart step-ca
 
+- name: Create step-ca secrets directory
+  ansible.builtin.file:
+    path: "{{ stepca_data_dir }}/secrets"
+    state: directory
+    owner: "1000"
+    group: "1000"
+    mode: "0700"
+
+- name: Write CA password file
+  ansible.builtin.copy:
+    content: "{{ stepca_ca_password }}"
+    dest: "{{ stepca_data_dir }}/secrets/password"
+    owner: "1000"
+    group: "1000"
+    mode: "0600"
+  no_log: true
+
 - name: Check if step-ca is already initialized
   ansible.builtin.stat:
     path: "{{ stepca_data_dir }}/config/ca.json"
@@ -69,15 +86,6 @@
         msg: "{{ stepca_init.container.Output }}"
       when: stepca_init is changed
 
-- name: Write CA password file
-  ansible.builtin.copy:
-    content: "{{ stepca_ca_password }}"
-    dest: "{{ stepca_data_dir }}/secrets/password"
-    owner: "1000"
-    group: "1000"
-    mode: "0600"
-  no_log: true
-
 - name: Start step-ca
   community.docker.docker_compose_v2:
     project_src: "{{ stepca_base_dir }}"