playbook.yml

---
- hosts: all
  vars:
    certfiles: [
      {src: 'fullchain.pem', dst: 'cert.pem'},
      {src: 'privkey.pem', dst: 'privkey.pem'}
    ]
    ansible_python_interpreter: /usr/bin/python3
  roles:
    - role: pre
    - role: jnv.unattended-upgrades
      become: true
      unattended_origins_patterns:
        # security updates
        - 'origin=Debian,codename=${distro_codename},label=Debian-Security'
        # updates including non-security updates
        - 'o=Debian,codename=${distro_codename},label=Debian'
        - 'o=Debian,codename=${distro_codename},a=proposed-updates'

    - role: geerlingguy.docker
      become: true
      docker_install_compose: true

    - role: geerlingguy.certbot
      become: true
      certbot_create_if_missing: true
      certbot_create_method: standalone
      certbot_admin_email: "{{ cert_email }}"
      # the role is dummy and needs anyway a service to stop,
      # so I choosed: "ntp"
      certbot_create_standalone_stop_services: ntp
      certbot_certs:
        - domains: "{{ cert_domains }}"
      when:
        local_cert != true

    - role: edumeet