openvpn: restart openvpn when the gateway certificate changes

If it is not restarted, the certificate is not picked up.

config/roles/openvpn/tasks/credentials.yml

@@ -9,6 +9,12 @@
       ca: "{{ credentials_dir }}/common/api_ca.crt"
       ca_key: "{{ credentials_dir }}/common/api_ca.key"
 
+- name: Restart openvpn because gateway certificate has changed
+  systemd:
+    name: docker-openvpn-openvpn.service
+    state: restarted
+  when: sspki_sign.changed
+
 - name: Add the docker-openvpn user to the openvpn-sspki group
   user:
     name: docker-openvpn