---
- name: Prepare mkcert
  block:

    - name: Install mkcert
      ansible.builtin.apt:
        name: mkcert
        update_cache: true
      become: true

    - name: Install mkcert CA
      ansible.builtin.command:
        cmd: "mkcert -install"
      environment:
        CAROOT: "{{ mkcert_caroot | default(omit) }}"
      changed_when: false

  become: false