Cleanup fetched tinc certificates

roles/tinc/tasks/main.yml

@@ -93,15 +93,15 @@
   notify:
     - restart tinc
 
-- name: Fetch tinc hosts file after key creation
+- block:
+  - name: Fetch tinc hosts file after key creation
     fetch:
       src: /etc/tinc/{{ netname }}/hosts/{{ inventory_hostname }}
       dest: fetch/{{ inventory_hostname }}
       flat: yes
-  notify:
-    - reload tinc
+    changed_when: false
 
-- name: Sync the fetched tinc hosts files on each host
+  - name: Sync the fetched tinc hosts files on each host
     synchronize:
       src: fetch/
       dest: /etc/tinc/{{ netname }}/hosts/
@@ -109,6 +109,16 @@
     notify:
       - reload tinc
 
+  always:
+  - name: Remove fetched files
+    local_action:
+      module: file
+      path: fetch
+      state: absent
+    run_once: True
+    changed_when: false
+
+
 - meta: flush_handlers
 
 - name: Start tinc on boot