---
- name: Filter www-prefixed domains from current_play_domains_all
  set_fact:
    www_domains: "{{ current_play_domains_all | select('match', '^www\\.') | list }}"

- name: Include nginx-redirect-domains role for www-to-bare redirects
  include_role:
    name: nginx-redirect-domains
  vars:
    domain_mappings: "{{ www_domains
       | map('regex_replace',
             '^www\\.(.+)$',
             '{ source: \"www.\\1\", target: \"\\1\" }')
       | map('from_yaml')
       | list
    }}"

- name: Include DNS role to set redirects
  include_role:
    name: dns-records-cloudflare
  vars:
    cloudflare_api_token:     "{{ certbot_dns_api_token }}"
    cloudflare_domains:       "{{ www_domains }}"
    cloudflare_target_ip:     "{{ networks.internet.ip4 }}"
    cloudflare_proxied:       false
  when: dns_provider == 'cloudflare'