--- /dev/null
+### -*-yaml-*-
+###
+### Tasks applicable for all Debian hosts.
+
+---
+
+###--------------------------------------------------------------------------
+### PKI machinery.
+
+- name: install PKI maintenance scripts
+ tags: [pki, pki-scripts]
+ copy: src=pki/{{ item }} dest=/etc/cron.daily/
+ with_items:
+ - update-ca-certs
+ - check-x509-certs
+
+###----- That's all, folks --------------------------------------------------