diff --git a/certs/samba/dc0.pyrocufflink.blue/openssl.cnf b/certs/samba/dc0.pyrocufflink.blue/openssl.cnf
new file mode 100644
index 0000000..51bfcd1
--- /dev/null
+++ b/certs/samba/dc0.pyrocufflink.blue/openssl.cnf
@@ -0,0 +1,20 @@
+# vim: set ft=dosini :
+
+[req]
+prompt = no
+default_md = sha256
+distinguished_name = req_distinguished_name
+req_extensions = req_extensions
+
+[req_distinguished_name]
+countryName = US
+organizationName = Dustin C. Hatch
+commonName = dc0.pyrocufflink.blue
+
+[req_extensions]
+subjectAltName = @alt_names
+
+[alt_names]
+DNS.0 = dc0.pyrocufflink.blue
+DNS.1 = dc0
+DNS.2 = pyrocufflink.blue
diff --git a/certs/samba/dc0.pyrocufflink.blue/samba-ca.crt b/certs/samba/dc0.pyrocufflink.blue/samba-ca.crt
new file mode 100644
index 0000000..a4cdecc
--- /dev/null
+++ b/certs/samba/dc0.pyrocufflink.blue/samba-ca.crt
@@ -0,0 +1,65 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/certs/samba/dc0.pyrocufflink.blue/samba.cer b/certs/samba/dc0.pyrocufflink.blue/samba.cer
new file mode 100644
index 0000000..526d1e8
--- /dev/null
+++ b/certs/samba/dc0.pyrocufflink.blue/samba.cer
@@ -0,0 +1,162 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number:
+            9c:cb:97:73:f8:4a:44:19:a9:cf:a2:cd:b9:80:0a:55
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: C=US, O=Dustin C. Hatch, CN=DCH CA R1
+        Validity
+            Not Before: May  6 03:39:28 2018 GMT
+            Not After : May  6 03:39:28 2019 GMT
+        Subject: C=US, O=Dustin C. Hatch, CN=dc0.pyrocufflink.blue
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (4096 bit)
+                Modulus:
+                    00:a2:93:38:79:ad:d0:d8:19:79:ba:fb:02:76:bc:
+                    6d:74:9f:af:76:1d:5f:26:96:93:4e:7f:e7:77:2a:
+                    9b:61:76:0b:7b:8f:25:6c:52:14:91:79:5f:44:e9:
+                    8e:54:c1:13:c9:6c:49:ee:3c:81:32:2f:a8:c8:80:
+                    18:19:75:b4:18:3f:3d:27:da:62:b8:bd:99:04:23:
+                    4a:66:04:7e:8d:6a:01:cb:c6:85:71:b5:0d:a9:63:
+                    1b:e4:93:6b:c7:15:3c:fc:af:28:5d:a0:4b:3d:78:
+                    26:cd:ee:29:4d:f9:1c:0c:d2:72:1b:f0:eb:2f:c9:
+                    bc:71:c5:9c:b6:3e:bc:cf:5a:88:18:6b:77:15:e3:
+                    37:a3:4f:7f:bf:bf:2c:c8:15:86:59:3f:62:f4:3a:
+                    2c:39:27:ab:42:e3:cc:7d:f1:d4:fb:94:06:29:3e:
+                    b0:c8:93:10:52:87:70:31:c4:2b:77:a0:17:8f:e3:
+                    c0:4f:8b:19:73:c9:57:17:a5:5a:14:b2:8a:43:98:
+                    0d:94:41:42:c7:dc:9d:b9:44:9a:f5:b0:02:01:49:
+                    62:a2:77:bb:a9:ff:3f:a0:b6:e4:ea:b1:e6:60:22:
+                    cc:94:94:71:23:b7:6d:81:21:4f:fa:82:eb:e2:7f:
+                    0c:7b:12:e8:3a:a8:40:9a:60:14:32:d7:ca:50:d8:
+                    38:45:8c:1e:69:63:73:6b:f1:d3:0e:0e:b3:da:ff:
+                    05:1f:d5:4a:cb:64:20:93:34:3e:d7:99:10:a3:d3:
+                    ef:2f:bf:a2:59:5d:fd:db:6d:b8:76:ca:a3:34:3b:
+                    a9:5f:9c:e1:b7:2d:4e:32:6d:3e:3b:b3:29:c6:71:
+                    1e:50:40:ff:25:01:0a:dc:a0:0f:7f:83:db:d9:32:
+                    2c:e6:cf:e9:f8:5b:d8:d0:3e:e4:7a:40:c1:7d:66:
+                    31:16:30:d0:5b:db:99:9a:20:dd:e3:49:0d:76:f3:
+                    3c:f9:9d:6b:4e:fd:6e:97:26:0d:44:d2:72:5b:ac:
+                    f4:94:2a:50:c1:58:6f:d2:9d:a7:a1:58:f5:b9:b3:
+                    f1:c6:53:49:02:e9:4f:d8:64:29:79:04:e7:c7:aa:
+                    8a:77:f7:45:80:3e:80:91:4b:c8:7b:bf:a0:7c:5f:
+                    04:1c:78:66:b4:49:92:c0:80:a0:ac:c8:9b:f2:a8:
+                    0b:05:e9:48:27:4b:b7:5c:17:4e:e2:e4:eb:76:99:
+                    a9:4a:53:69:3f:7f:97:51:07:46:0d:9f:c8:06:a4:
+                    b0:28:f7:92:67:ff:80:1a:3b:85:b3:f3:3b:eb:c6:
+                    95:71:54:cb:96:0e:0b:93:24:f5:ae:81:d0:2e:ff:
+                    00:de:52:6a:53:53:ad:c0:45:ea:cd:83:f7:02:64:
+                    4c:12:51
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Basic Constraints: 
+                CA:FALSE
+            X509v3 Subject Key Identifier: 
+                67:16:34:74:89:76:4F:B6:53:59:81:5F:81:9C:9D:B9:B2:27:D7:DD
+            X509v3 Authority Key Identifier: 
+                keyid:EC:79:C5:08:B7:1E:0A:67:C6:E0:34:31:3C:79:D9:D6:83:D9:49:DC
+
+            X509v3 Key Usage: critical
+                Digital Signature, Key Encipherment
+            X509v3 Extended Key Usage: 
+                TLS Web Server Authentication
+            X509v3 Subject Alternative Name: 
+                DNS:dc0.pyrocufflink.blue, DNS:dc0, DNS:pyrocufflink.blue
+    Signature Algorithm: sha256WithRSAEncryption
+         50:bc:a2:2d:21:45:9f:64:d6:20:d7:98:f6:9f:2a:cd:66:b7:
+         fa:29:ee:83:98:f5:23:f3:d7:2d:6e:fb:49:08:1a:f9:2b:aa:
+         87:3e:64:f0:61:95:fc:db:fb:b8:b5:55:ba:f0:6c:5c:e0:d7:
+         8b:f1:e7:07:49:71:d4:28:ed:38:dd:67:da:e1:f8:95:98:11:
+         0c:e7:0e:fd:49:67:55:00:ec:8a:22:ce:9f:b5:4d:f1:1d:28:
+         b1:60:76:ba:13:f9:9a:33:97:6a:cf:41:97:10:2a:aa:24:9a:
+         6c:41:16:1f:e4:2f:03:dd:e9:83:62:77:0a:3a:0c:8d:a1:5b:
+         58:a1:7c:68:ab:40:57:af:f8:54:b2:d4:d7:d7:1e:72:74:17:
+         18:53:db:7f:26:8b:f3:9a:f5:a3:eb:3c:57:f8:4c:2d:f6:4e:
+         b6:48:1b:e1:87:cd:3b:48:cb:9f:58:3d:b6:a6:e8:e7:aa:7d:
+         70:94:af:d5:ba:9e:c0:24:4f:ec:e7:d4:76:e3:7f:2a:97:88:
+         2e:5a:55:df:70:d6:1d:ee:9a:d1:99:f4:c0:fb:dc:0b:20:73:
+         42:26:b1:9a:a7:3d:85:3c:ce:81:78:74:bd:a6:ec:f8:10:7d:
+         5d:e5:3d:77:1b:d0:f4:ff:2a:38:ca:86:bc:0c:bf:99:eb:d6:
+         44:22:f0:5e:94:cc:03:4b:5a:a4:d6:52:30:1f:78:cc:a0:50:
+         ee:9a:c0:b3:a1:31:cd:10:0d:4f:49:17:27:d5:19:86:3a:d9:
+         e1:70:7a:22:06:2e:77:7b:2a:f6:04:f5:3f:e2:28:c2:dd:55:
+         cd:6c:64:3e:1b:b0:38:29:cd:c8:7b:c0:68:f7:5a:a3:50:80:
+         35:e1:dd:c7:01:ea:f5:49:8b:18:0e:44:3d:da:11:c8:c9:c2:
+         58:48:5e:d2:12:a9:9a:05:29:eb:21:b0:b0:7e:ae:3d:f2:ee:
+         1f:1f:fa:d0:ed:8e:bc:e8:57:33:f5:a4:09:15:ca:49:bb:ca:
+         95:bd:df:5c:96:11:f0:61:8c:e3:26:66:74:4a:ba:e7:cd:b7:
+         c6:48:33:a9:d0:6c:cd:08:da:ca:e8:37:0c:da:d8:39:64:48:
+         29:85:30:a0:07:2c:14:39:82:ea:28:2e:e8:75:5c:e7:9a:fb:
+         f9:56:5c:b3:16:24:b2:be:18:b9:d1:fc:b6:fe:b2:9b:eb:37:
+         91:38:ef:43:24:c8:21:9a:4d:d1:f0:32:e7:45:c4:8c:aa:e9:
+         65:63:23:a2:50:d7:6d:a6:2c:db:e8:c9:05:6e:44:3a:6d:8a:
+         f7:53:86:3b:22:64:bb:7b:82:03:13:5b:7c:26:69:6e:66:2d:
+         d6:cb:dd:8b:fa:64:7a:a7
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----
+MIIF9DCCA9ygAwIBAgIQEq6125a+Q7iNMRH0QpHv7jANBgkqhkiG9w0BAQsFADBA
+MQswCQYDVQQGEwJVUzEYMBYGA1UECgwPRHVzdGluIEMuIEhhdGNoMRcwFQYDVQQD
+DA5EQ0ggUm9vdCBDQSBSMTAeFw0xODAyMjExMzA0MTBaFw0yMzAyMjAxMzA0MTBa
+MDsxCzAJBgNVBAYTAlVTMRgwFgYDVQQKDA9EdXN0aW4gQy4gSGF0Y2gxEjAQBgNV
+BAMMCURDSCBDQSBSMTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMHd
+Vudcm2XgUCQ5us0mTmzbCkHt0RBGMbnq6V0E9YohWotuXFwj4uvqV4z8raDGNKEv
+MQpLQ1qzcN7pElcBC8LS38F06sMdEJWkhp9xpZ96tF5oWN1XD7VVufuJbec+/ZLB
+ZFt7lBkux9BxQhG42KWdhx/Xa4vL2XYyWgh5gis26jx5znBt40DlNhfPGwAzY2h4
+J1q+eMIBkggALPYIu79fpHdgBcIf4yHbltjAtwpypQa0btPu1pF+R/xKGphqOhEo
+nl5hAiw9yZhEoJyLGWlG9SIyCfirti2g11lhE2UuXqNkf79PLJTmI/z07zsUj3x6
+4ERTZ/9Y+RxopDbKYlJGOBKnzmSboTLNObnyVUcs+shVuC8oRZr8/M1kVPpfGfp+
+3bHlz2UYqNKPNBaD9CYw4aN/tUSg0TP+A/I7sks4wOmyA+b0GB8JY+fdJtzsniuj
+Q2TY/tF2wMapkhr6AQcVc0qACfoCPoN/ErwAH1NDBJ5/rC//6czyBv6Gzo1nRifQ
+SN51dNrCGAyRMBFcz44bebKUyF5LdhzaiO/oQvdPtZt2/hy3HbqyDrDbKU6hSAPI
+CmKroKUZhq4Z6HI1D3Lw3R8dKWryjdQdPvxgsMwsUpYq8bRfrNRa5QX8hmHiXddK
+FP/46GBk+rFaXnDSW/nnxOGuEtBqSJBLchmdku+FAgMBAAGjge4wgeswEgYDVR0T
+AQH/BAgwBgEB/wIBADALBgNVHQ8EBAMCAYYwSwYIKwYBBQUHAQEEPzA9MDsGCCsG
+AQUFBzAChi9odHRwOi8vZHVzdGluLmhhdGNoLm5hbWUvZGNoLWNhL2RjaC1yb290
+LWNhLmNlcjAfBgNVHSMEGDAWgBTHv9/HaQWp6OM+287mR86SLScRajA7BgNVHR8E
+NDAyMDCgLqAshipodHRwOi8vZHVzdGluLmhhdGNoLm5hbWUvZGNoLWNhL2RjaC1j
+YS5jcmwwHQYDVR0OBBYEFOx5xQi3HgpnxuA0MTx52daD2UncMA0GCSqGSIb3DQEB
+CwUAA4ICAQCDwoJ+/qHDyEevHvQ0U0/NgvFLLEuly5Sm01vgd/H9GgVGRxlDcpGw
+lX6t4GU0RyMmCRLJgsA6KuKS5ObIB9CgqRHXPOxomZyIE2IOD9R4eiYE7IBlGLoN
+qYw2DK9caRkErOrAPG4G9sdlq4n8g3BVhT6G23dZ3L2Hf83k2mWrlCLOoX+gElZa
+BI3Ehsx37hTFib3VnJJhRXRgTNm9oVoFjMoHiZU/Vrrg7cKxcP6uvaGz2y6ckfpp
+3h9Pv7wb0jWfK4BTvm5EPMYe8hVCrQVWJxnQ0eC5r1rzrmDovYTASb2+C9OHTq9O
+WXxQJ4uF7R8ciG002IPjE1Yg97qhckwaITof3Ay1NRrlRuZmfwWQee6ASOp6jBLq
+aEzE92qDskvtyhaYM07OXouo8wWwbGerV2kkAnvdSEw1WFMVIaG8zbKR8M0RRJYO
+Ll9DiKH8M8cnRm0laSPWF0zuaJ/ZEobL0TfZQrsfNWUMwNFY1WM18BwtO+GiD6dR
+KlxT07q525JaWeU1t8n5tf+7ouOzy+/9lDYAx6XwtfDnBbjfwOdh3HWn0nPzFXV8
+Xtk4F633qN4p0/DEW4a+uZ03cvxlyB+VtZtd1nihMwm9MC2qFXLuFlq0qtkw1GxD
+A8Pq0NT8z86nlW3dfSChYE0whHQ7OkYVjHjoMTvjGDa8lk/2n0jkhw==
+-----END CERTIFICATE-----
diff --git a/certs/samba/dc0.pyrocufflink.blue/samba.key b/certs/samba/dc0.pyrocufflink.blue/samba.key
new file mode 100644
index 0000000..8508fba
--- /dev/null
+++ b/certs/samba/dc0.pyrocufflink.blue/samba.key
@@ -0,0 +1,169 @@
+$ANSIBLE_VAULT;1.1;AES256
+37663237663065616538373566373764316562326461336431353932336635656435373765393561
+6535313633386161343337613335656633636363646134640a333436666236653065306131383433
+66353663613566323666323836346665366433363763363839623861393138383838326330613232
+6532643664346261610a316335373336636335653163343437303631623065343664393162396635
+31306336323030393962656234653363323736643335363736646364613638323234646463393431
+61313430633064306233363839663531323565383436663237616633326434623332636533613031
+38383331393365373937383463356234636436346432353462666532353030366234643035323737
+65386130376330316639313339343530333939366532313765366163343537396363373332646463
+64383333396266333734363738643435343165343134353630313731653938616635326237353463
+66363031653035333132363533333866343535653733333031623866376364643136396166343337
+64623532663663666236313437633933343064633731643334386666353039623237346165333763
+31656139353136343564366337333964353131323864656136373731653938373962616633643764
+30633239393933343230636432663561653830623366653465326363373735336436306561366435
+34663838346461373561303537303562393866633734643332643833333138663030643037353663
+37366161623164393564356261653164623165323737626438313161393832393633393532636663
+35616362366465333964343735666231383566356639653531383736333738643363306162633933
+61393831363939616136643532623365323436323463643864323739613666313831363865346630
+36323337386462336536623866343134396239663031373436373130303733323134393135653535
+63316563646230376233316238616238333435626634396461346138396230336562646163316631
+63356339373966303138383936366663616162663766353531363562343733633866336638383031
+32386563636636616163336266323230626333333837633835633036363531636363336165616337
+62646635346638356362353061613439646235656333353630393762323564643364383430353136
+31303437613237333738643637653531656330323636393139623438326266363939356639626531
+37306230316530666638336462396463383830616438386635346139306232616266633837343038
+38343538633561396139366637643265343162366533653032363734323666643065303064663034
+61343933626266643562316431666130336631386135633933376361386461373664356365646261
+31613561376333626662613236656262356532633239653131313966373133666235383234613234
+65336162613561633837336130646261663466306264373038336462643339656537323462346332
+34646566613263633333653935623730363032333032303330373038333830343837636136303765
+61663737333130316537333964653038356339313461653830653439353335626539393439643265
+37646566616639666136313635623965663231616161393638626562656264663866393661666262
+39633038316266353037613030643461386663313764363163623631383864313632363732636666
+35623662386235623938623135303165643062326237356533626531653137353031633262346333
+35376232643334313936336237656462393832366162623963363934323736343134396231306137
+36376366653837373832653630376439333733313866393637376332333631306433666461383135
+39363430633030323837326337313533636439623065666630653766313864323761656538633532
+33353939383133343662323131633233323333366466333134323432656666306361363166396262
+63623437333862333663653835326361353663663534393135633961343331343135663939383364
+31326135373532346633333866363533363533313234623930313062626466326465313037636138
+31666536346337636537393563373838343934643239613637616161646163636339303266323834
+35363433373830656463393933666532656636396536346436316561343235333765306432396461
+36383537353362323164636537393738633837646665396134313962386663346535616336356161
+62303164353736353466623062386164613036303735613838656430633264316266316332363934
+61303933663738306465656536643333396365646637313831336161373035643165616630386466
+66386138366365303835653633353734376466303266326331396232346263336534366638313564
+30316439666563376262366130343062323936386364663466363132393838326535393861343766
+36373530633531323465373239343737636163376332306132326135326135373561343330646462
+35363137653837633233383335333065386333666539333339636365343734353361646138323463
+34383464356532616139306635383836313538376434626239393961383336386236343533333962
+34366536366136316237363365333837303261656362643766346636346339636530313938363938
+37626133393862306466306663636634363333343762636531626365336635303639306532383363
+61356535666463653531326634353939303061623934616637613539636231653063333633663432
+35343061386432623739616337373466376232663234343930653962303962316431343261663236
+39346266356164343463353636663235646537663362333434653361613539356435376439303437
+31653933393266373565386465643239313435393535396266383263373864373234346332336537
+62353261656566393862626133663730666162626565626461363563306464643534333537626638
+66646531376532346435383836356364613634396363663433663437356637623236636562326466
+33643933643362373134383633636261396665353662346339666134333033333262323338303261
+37323736333763643061313636656131313034343864373738333330663734646530393564386436
+65313338623430383237666533376361386666363130383135393262653033373962383636363132
+33633038366136663863396539653038383630666363383036663364306264363634373732323932
+63323430653735653762636562653731656639613830306535363964336362393534306333663937
+61366561613765353065393333376535663338383362636430313230383933653062653532373135
+66663862633334343239643937373535393765366637663461393934636233633638366461643435
+61626132343063303365616432656330363061646333383239633734376238663834626636363037
+35656430383364616161313166326462656333643132646639353761396538393165323866376235
+65386432376166633831636663646566386539616230393266393438303133333238646536663263
+32613830643561333034316466663366386264353039353766386531346633346164316261346264
+36616234663563336339376438636662323231623966306530363039636232636135646434313935
+65303165653236326638646464303737666331643039353164393062343532393432376632356130
+65333035633736386132383462386235343732306432663933393134303963363538326137613731
+34326262653837363565333966366139316231356263343730643963343361323465633832653130
+64656366393236653164633534356261383364393664623633646336356364613863346464316465
+64333230646538386535663964393761613034386164383634376331663066646462626135643035
+39363464666335383230323330393361653464623561613838326134633862376533663365313764
+39343335666334343436646133633539663564636630316135653930623165656564666338343461
+35653336346165653834613032333831646464643334626639373062353435353836663233326434
+64643033653339306431653332643839383866373030363865616266663037356265326261613532
+37346263623330386365623037356462366364653561623235366432316133613961636465353363
+39363735333332356532653434363163316362313465376134313234643237623932303261353565
+34363763666666333537653039333263363730393434323134323531613934353235666534343163
+39656535643030633833646362666465356363363064666135643030396265646538663935303730
+33386233396331336332376633393239393038373134636563353836333563643034636163376566
+64633434303232343932383166323031346634363234376631663433623537653361623137303130
+65343362616130613561666233346235626562616630343562613732386231363663626662313039
+62643139356230613661386334663863376332666339323565363831336666633139616530613531
+38643038393539313562633235656364636632663039306337623931336133383830333330653335
+34373236333365373861356339393563316263313932373137386635313839646331323932373130
+65623665336632326465363839653866363765336236383639363762663835383161656434383636
+35633935356131316335666532383032356161323639393935326164613535626533343731326231
+34323538623466633834353165336335396537626338643464376638353363666365346432353038
+35333032656464653537383731643763616339373837636561666139306533366439373436376462
+32623336333465323632613934306231363262356339376233393230323432323066336634366430
+35356461303138343562623032336662373531633332313439323765376230373231313534643034
+30343932323033633866363035303961353836333465316239613062326164326537613538646661
+61663433396132363238393363373464653534633036613365353466636662666631336537666363
+63393631643534326266616636656562316539303665636266396161316636313737366537663332
+30643730616264333438383262633765633832343638386336313637306336636563356238363730
+63666332343866646233383130343363303265376433306662303364663961353237653139386134
+34313830323961613338356166303064393664643537383065376132396566613630363330366333
+39333037383462343564316338373731373232326361633361656463646130356436333263393862
+39313063393938323439383763393730623466393864376633633134393262343132343263386664
+63333933643332613637333465663534316230343265623130613130393166363839336261386165
+38306466343031356561643732613261303238323762666261333536313331633565303139303261
+62333131623363376631613364306338303165353438386164663463616432633438313661633831
+39303362666432353363333036313635376438623733356139363732343734326362393130353731
+30316333336364353966333161366539626266323865313565303561346637316262383335343133
+35616161396363653938336364306336326431303834666635396362613265646539616235353232
+36613062326436393265323532373537633334663338613133313136383762643764653139323762
+61306532353864643735396631623763636563613239316130613962303330633261373635343233
+63336532346637386366363165363361613235313666323534643033663530343361393366336262
+64653866336433333037626134336437346665356666386230666666333461616164303939373632
+36656164323262303366646338383031623435373430646534376634626635386165316634623832
+38633030666662343166613039643830666466633361393062623634613338323535363061366239
+33353664623666363163623964636538366263333066373930353131633665393164666163376664
+66363130653135633462633965313864616362343337356164653533353665666464633438643934
+37636665623538326564626434363433373537323130376365303437353236623538303662353235
+30613836613633336330396566343234643164646131333761663964306536623636633839656336
+61363132666165373263386266353735666336316364323463336432636234623566643536626162
+63663263313665656661623938363464646532343461383738666536636566366162326338636365
+62316237636330643666356130663334616131353966663339663634623438353832376230313535
+35356665376364353362666130666362656333643634303139623262376638656234396465323833
+38383961663939316464646562323466626663356131626537666139393762306433613335393839
+31643464633162313131663134313630653464326564353234363265316338306163323063383764
+61363761303339663266663964313161323435336335333038653662373731363632633562386539
+63663130633933393839613831666337373762396462666533323866646164306639353264653865
+35383564303735326464356532326334626238353164313837626231366562323839323164663338
+33346234333238313662613332383938343961646232353965663863343763373232393638646637
+33626638656234663733333564626336356634386632636637303861613361353430356566633866
+62356539363965343065636130383066333337393535653663626333333938626166363465343864
+30396330393664383761653732623765626336336439666430343366653630616665323931336539
+64396531383164303461393261663235643332376564393263333561613564646433633566336433
+35643366383138636364636161386662653461623163636239323161313233323139343965373764
+36653832356139643430396235313434623635666333363430333364363535626661663238333036
+39653038633161663563623665666337356465623136326630393337623062316432663634636533
+37356232656238336332623438383963333964303666313537326265656131323763353666643261
+63623937376337373562633233633261313631626366656438343535386362613230353864356338
+64636565346331376134383166393164366364336138356638656331626238613232376136656530
+39616234363364343233313562363632663966376336303238616666626161323036366634356133
+62313461383161366166326131386263653361393231666634653162623232363431326664376266
+34303066333831353763626436376230386361653734646432303733626239633334306566336334
+62313665386636303332393063653063313530636437366439346561313961363738656666303231
+39383839323866303136643362343934376261303537643837643631346266323265323838613565
+39396235646631613838343934323537393364343231343834616262623530313732653939663735
+30663839326431626662343961383935356138386362626266306236613333343030643330313633
+38306133363837396562363539613264353936636665666435656165616431336436613632663266
+33616565346561316365373031336534316663623436633139393639393834356262343632653731
+38366464643239653038636132656130343830653262313434626334336231363763356133663037
+30386361643763663632346462613461366565653436613836386638323336316433386233343862
+65653136626261393335306331396237376266326663663335363835636630306262626366636131
+66303536346236613762623632613962643361316264636462303464353661333962643963646330
+30666464373038653466613861636138386164646536613764663632663533656265356337333035
+66613737653539666533653335343134363464373837386239353830386336663233383437336533
+31616630383464333234626631383235356334613663353134353033663433326539333939363738
+35376134663062326335643932366239353936373735653539363633633230323932393832326131
+37663530646663396133623738656338376561323765313431353636353732343230643536663733
+38653234323238313966643662373337333633653364663839323930343438313636386134326563
+61366164313737663938613037313762363363336263666262376564333762386336616336616638
+35333137626336336537346632303135653961616331363438333961393264663737636265376136
+33326138653561656235636530313339623864613335343833346163353766343435343862666436
+62663563363234343537313036353438336636616531356338333265343961376162373063336139
+61353335643564313839353666386463366566653330393030346465633333666537313164643138
+65663363313166653662323664346362623830393932386261316431306136393937343133373734
+38393439396437363231363830316636356331633366633765313839623633643339623861383363
+62393339383962333231643238613739613331623664623631623233373131316133646533343961
+34663039323131373632626637633736343462323865386238656636316332636264366461336666
+66323336666262653764653332363461396433613261313335613763666666313538613661666464
+35623135313561303631
diff --git a/roles/samba-dc/tasks/main.yml b/roles/samba-dc/tasks/main.yml
index 4bbf9a7..309f755 100644
--- a/roles/samba-dc/tasks/main.yml
+++ b/roles/samba-dc/tasks/main.yml
@@ -36,6 +36,32 @@
   - restore samba file contexts
   - display generated admin password
 
+- name: ensure samba certificate is installed
+  copy:
+    src={{ item }}
+    dest={{ samba_tls_certfile }}
+    mode=0644
+  with_fileglob:
+  - certs/samba/{{ inventory_hostname }}/samba.cer
+  notify: restart samba
+- name: ensure samba certificate private key is installed
+  copy:
+    src={{ item }}
+    dest={{ samba_tls_keyfile }}
+    mode=0600
+  with_fileglob:
+  - certs/samba/{{ inventory_hostname }}/samba.key
+  notify: restart samba
+- name: ensure samba ca certificate is installed
+  copy:
+    src={{ item }}
+    dest={{ samba_tls_cafile }}
+    mode=0644
+  with_fileglob:
+  - certs/samba/{{ inventory_hostname }}/samba-ca.crt
+  when: samba_tls_cafile is defined
+  notify: restart samba
+
 - name: ensure smb.conf is configured
   template:
     src=smb.conf.j2