🍻 pottwal: jabber/prosody: Add deploy cert hook

Hook works outside of ansible in personal prosody instance. Hope I
understood the template correctly, docs of dehydrated role are quite
sparse on that.

The dehydrated cert path variable is only available since recent change
c4af7754b2 ("✨ Use variables to configure dehydrated
locations").

Link: https://prosody.im/doc/certificates

pottwal.yml

@@ -33,6 +33,8 @@
         - name: uritools-api.n39.eu
         - name: sl.n39.eu
         - name: pad.n39.eu
+        - name: jabber.n39.eu
+          deploy_cert_hook: "docker exec prosody prosodyctl --root cert import ${DOMAIN} /var/lib/dehydrated/certs"
     - role: penguineer.dehydrated_cron
     - role: dd24-dyndns-cron
       # variables are set in the inventory
@@ -138,8 +140,7 @@
           - "{{ prosody_data }}/etc/prosody:/etc/prosody:rw"
           - "{{ prosody_data }}/var/lib/prosody:/var/lib/prosody:rw"
           - "{{ prosody_data }}/var/log/prosody:/var/log/prosody:rw"
-          # TODO  Migrate to dehydrated role
-          # - /var/lib/dehydrated:/var/lib/dehydrated:ro
+          - "{{ dehydrated_certs_dir }}/jabber.n39.eu:/var/lib/dehydrated/certs/jabber.n39.eu:ro"
 
     - name: Ensure container for static XMPP website is running
       docker_container: