- name: Install lets-encrypt
  become: yes
  pacman: name=letsencrypt state=present update_cache=yes

- name: stop webserver
  become: yes
  service: name=nginx state=stopped
  ignore_errors: yes

- name: validate domains
  become: yes
  command: letsencrypt certonly --standalone --email dennis@brentj.es --agree-tos {% for domain in lets_encrypt_domains %}-d {{ domain }} {% endfor %}
  tags:
    - production_only

- name: start webserver
  become: yes
  service: name=nginx state=started
  ignore_errors: yes