---
- name: Renew SSL certs for nginx
  hosts: reverse_proxy
  vars:
    servers:
      - gitea.seandersontech.com
      - shadowdark.seandersontech.com
  become: true
  tasks:
    - name: Stop nginx service
      ansible.builtin.service:
        name: nginx.service
        state: stopped
    - name: Renew Certbot certificates
      ansible.builtin.command:
        cmd: certbot certonly --standalone -d {{ item }}
      loop: "{{ servers }}"
    - name: Start nginx service
      ansible.builtin.service:
        name: nginx.service
        state: started