playbook.yml

---
- hosts: all
  gather_facts: False
  pre_tasks:
  - name: Install python for Ansible
    raw: sudo bash -c "test -e /usr/bin/python || (apt -qqy update && apt install -qy python-minimal)"
    register: output
    changed_when: output.stdout != ""
  - setup: # aka gather_facts
  roles:
    - common

- hosts: ctf-web
  pre_tasks:
  - name: include common vars
    include_vars: vars/common.yml

  - name: check files/letsencrypt
    local_action: stat
                  path=files/letsencrypt/
    register: lefiles

  - name: synchronize /etc/letsencrypt
    become: yes
    tags: lesync
    synchronize:
        src: files/letsencrypt/
        dest: /etc/letsencrypt/
        delete: yes
        checksum: yes
        mode: push
    when: lefiles.stat.exists and lefiles.stat.isdir

  roles:
    - role: web
    - role: ansible-letsencrypt
      letsencrypt_webroot_path: /var/www/html
      letsencrypt_email: admin@{{ domain }}
      letsencrypt_cert_domains:
          - "{{ domain }}"
          - www.{{ domain }}
            #- chal.{{ domain }}
      letsencrypt_renewal_command_args: '--renew-hook "systemctl restart nginx"'

- hosts: ctf-chal
  roles:
    - chal