- block:

    - name: Synchronise service configuration
      copy:
        src: "./filesystem/common/var/lib/_hostname/home/pod-_rproxy/.config/pod-_rproxy/"
        dest: "{{ service_home }}/.config/{{ service_user_name }}"
        directory_mode: 0755
        mode: 0644
      register: rproxy_synchronise

    - name: Generate Diffie Hellman ephemeral parameters
      command: openssl dhparam --out /{{ service_home }}/.config/{{ service_user_name}}/dhparam.pem 4096
      args:
        creates: "{{ service_home }}/.config/{{ service_user_name }}/dhparam.pem"
      register: dhparam

    - name: Enable container-rproxy-certbot timer
      systemd:
        name: container-rproxy-certbot.timer
        enabled: yes
        scope: user

    - name: Record changes
      set_fact:
        service_changed: true
      when:
        rproxy_synchronise is changed or
        dhparam is changed

  become_user: "{{ service_user_name }}"