ansible: Add ZNC drop-in for certbot to gate config

ansible/gate.vstill.cz.yml

@@ -279,6 +279,24 @@
         pkg:
           - certbot
 
+    - name: Dir for ZNC drop-in for certbot
+      file:
+        state: directory
+        path: /etc/systemd/system/certbot.service.d
+
+    - name: ZNC drop-in for certbot
+      copy:
+        dest: /etc/systemd/system/certbot.service.d/znc-setfacl.conf
+        content: |
+          [Service]
+          ExecStart=/bin/bash -c '/usr/bin/setfacl -m u:znc:r-- /etc/letsencrypt/archive/msg.vstill.cz/privkey*.pem'
+      register: certbot_znc
+
+    - name: Reload systemd after installing ZNC drop-in
+      systemd:
+        daemon_reload: true
+      when: certbot_znc.changed
+
     - name: Disk utils
       apt:
         pkg: