THE HUGE REFACTORING CALENDER WEEK 33; Optimized Matrix and during this updated variables, and implemented better reset and cleanup mode handling, also solved some initial setup bugs

roles/sys-svc-certbot/tasks/01_core.yml

@@ -0,0 +1,8 @@
+- name: install certbot
+  community.general.pacman:
+    name: certbot
+    state: present
+
+- name: "Include tasks for 'No-Webroot-ACME-CHALLENGE-METHOD'"
+  include_tasks: 02_no_webroot.yml
+  when: CERTBOT_ACME_CHALLENGE_METHOD != 'webroot'

roles/sys-svc-certbot/tasks/02_no_webroot.yml

@@ -0,0 +1,21 @@
+- name: install certbot DNS plugin
+  community.general.pacman:
+    name: "certbot-dns-{{ CERTBOT_ACME_CHALLENGE_METHOD }}"
+    state: present
+
+- name: Ensure /etc/certbot directory exists
+  file:
+    path:   "{{ CERTBOT_CREDENTIALS_DIR }}"
+    state:  directory
+    owner:  root
+    group:  root
+    mode:   '0755'
+
+- name: Install plugin credentials file
+  copy:
+    dest: "{{ CERTBOT_CREDENTIALS_FILE }}"
+    content: |
+      dns_{{ CERTBOT_ACME_CHALLENGE_METHOD }}_api_token = {{ CERTBOT_DNS_API_TOKEN }}
+    owner: root
+    group: root
+    mode: '0600'

roles/sys-svc-certbot/tasks/main.yml

@@ -0,0 +1,4 @@
+- block:
+    - include_tasks: 01_core.yml
+    - include_tasks: utils/run_once.yml
+  when: run_once_sys_svc_certbot is not defined