diff --git a/.github/workflows/app-pipeline-renew-node-ssl-certs.yml b/.github/workflows/app-pipeline-renew-node-ssl-certs.yml
new file mode 100644
index 00000000..58eec7f4
--- /dev/null
+++ b/.github/workflows/app-pipeline-renew-node-ssl-certs.yml
@@ -0,0 +1,76 @@
+name: Renew node ssl cert 
+
+on:
+  pull_request:
+  push:
+    paths:
+      - '.github/workflows/app-pipeline-renew-node-ssl-certs.yml'
+  workflow_dispatch:
+    branches:
+      - main
+
+jobs:
+  renew-nodes-ssl-certs:
+    uses: svc-design/actions/.github/workflows/renew-nodes-ssl-certs.yml@main
+    with:
+      domain: 'onwalk.net'
+      cluster_name: 'artifact'
+      ssh_host_ip: '35.74.62.32'
+      ssh_host_name: 'artifact'
+    secrets:
+      SSH_USER: ${{ secrets.SSH_USER }}
+      SUDO_PASSWORD: ${{ secrets.SUDO_PASSWORD }}
+      SSH_PRIVATE_KEY: ${{ secrets.SSH_PRIVATE_KEY }}
+      ANSIBLE_VAULT_PASSWORD: ${{ secrets.ANSIBLE_VAULT_PASSWORD }}
+
+  renew-nodes-ssl-certs:
+    uses: svc-design/actions/.github/workflows/renew-nodes-ssl-certs.yml@main
+    with:
+      domain: 'onwalk.net'
+      cluster_name: 'xproxy'
+      ssh_host_ip: '43.206.158.21'
+      ssh_host_name: 'xproxy'
+    secrets:
+      SSH_USER: ${{ secrets.SSH_USER }}
+      SUDO_PASSWORD: ${{ secrets.SUDO_PASSWORD }}
+      SSH_PRIVATE_KEY: ${{ secrets.SSH_PRIVATE_KEY }}
+      ANSIBLE_VAULT_PASSWORD: ${{ secrets.ANSIBLE_VAULT_PASSWORD }}
+
+  renew-nodes-ssl-certs:
+    uses: svc-design/actions/.github/workflows/renew-nodes-ssl-certs.yml@main
+    with:
+      domain: 'onwalk.net'
+      cluster_name: 'www'
+      ssh_host_ip: '8.130.36.45'
+      ssh_host_name: 'www'
+    secrets:
+      SSH_USER: ${{ secrets.SSH_USER }}
+      SUDO_PASSWORD: ${{ secrets.SUDO_PASSWORD }}
+      SSH_PRIVATE_KEY: ${{ secrets.SSH_PRIVATE_KEY }}
+      ANSIBLE_VAULT_PASSWORD: ${{ secrets.ANSIBLE_VAULT_PASSWORD }}
+
+  renew-nodes-ssl-certs:
+    uses: svc-design/actions/.github/workflows/renew-nodes-ssl-certs.yml@main
+    with:
+      domain: 'svc.plus'
+      cluster_name: 'www'
+      ssh_host_ip: '8.130.36.45'
+      ssh_host_name: 'www'
+    secrets:
+      SSH_USER: ${{ secrets.SSH_USER }}
+      SUDO_PASSWORD: ${{ secrets.SUDO_PASSWORD }}
+      SSH_PRIVATE_KEY: ${{ secrets.SSH_PRIVATE_KEY }}
+      ANSIBLE_VAULT_PASSWORD: ${{ secrets.ANSIBLE_VAULT_PASSWORD }}
+
+  renew-nodes-ssl-certs:
+    uses: svc-design/actions/.github/workflows/renew-nodes-ssl-certs.yml@main
+    with:
+      domain: 'svc.ink'
+      cluster_name: 'www'
+      ssh_host_ip: '8.130.36.45'
+      ssh_host_name: 'www'
+    secrets:
+      SSH_USER: ${{ secrets.SSH_USER }}
+      SUDO_PASSWORD: ${{ secrets.SUDO_PASSWORD }}
+      SSH_PRIVATE_KEY: ${{ secrets.SSH_PRIVATE_KEY }}
+      ANSIBLE_VAULT_PASSWORD: ${{ secrets.ANSIBLE_VAULT_PASSWORD }}
diff --git a/ansible b/ansible
index 11866023..4880eb5b 160000
--- a/ansible
+++ b/ansible
@@ -1 +1 @@
-Subproject commit 1186602358bd02883a318f5f6f2b354c4ef5d746
+Subproject commit 4880eb5b5c12062d71a14d31af8e1a39d34c2e48