letsencrypt.yaml

## hostvars:

letsencrypt_certs:
  - demo.ubuntu.lt
  - ubuntu.lt, www.ubuntu.lt
  - legacy.ubuntu.lt

## my letsencrypt role's main/tasks.yml:

- name: generate certificates
  command: >
    /opt/letsencrypt/bin/certbot certonly
      {% if letsencrypt_dry_run %}
      --dry-run
      {% endif %}
      --text
      --noninteractive
      --agree-tos
      --email "{{ letsencrypt_email }}"
      --authenticator apache
      {% if item is string %}
      --domain "{{ item }}"
      {% else %}
      {% for domain in item %}
      --domain "{{ domain }}"
      {% endfor %}
      {% endif %}
    creates=/etc/letsencrypt/live/{{ item.split(',')[0] if item is string else item[0] }}
  with_items:
    - "{{ letsencrypt_certs }}"
  tags: [ letsencrypt, certs ]