Solved bug existed due to difference between mailu domain and hostname difference. also refactored during this to find the bug

roles/sys-svc-cert-sync-docker/tasks/01_core.yml

@@ -0,0 +1,13 @@
+- name: Include dependency 'sys-alm-compose'
+  include_role:
+    name: sys-alm-compose
+  when: run_once_sys_alm_compose is not defined
+
+- name: "Install '{{ CERT_SYNC_DOCKER_SCRIPT_FILE }}'"
+  ansible.builtin.copy:
+    src:  "{{ CERT_SYNC_DOCKER_SCRIPT_FILE }}"
+    dest: "{{ CERT_SYNC_DOCKER_SCRIPT_PATH }}"
+    mode: "0755"
+    owner: root
+    group: root
+  notify: restart tls deploy to docker service

roles/sys-svc-cert-sync-docker/tasks/main.yml

@@ -0,0 +1,27 @@
+- block:
+  - include_tasks: 01_core.yml
+  - set_fact:
+      run_once_sys_svc_cert_sync_docker: true
+  when: run_once_sys_svc_cert_sync_docker is not defined
+
+- name: "create {{ cert_mount_directory }}"
+  file:
+    path: "{{ cert_mount_directory }}"
+    state: directory
+    mode: "0755"
+  notify: restart tls deploy to docker service
+
+- name: configure sys-svc-cert-sync-docker service
+  template:
+    src: "sys-svc-cert-sync-docker.service.j2"
+    dest: "/etc/systemd/system/{{ CERT_SYNC_DOCKER_SERVICE_NAME }}"
+  notify: restart tls deploy to docker service
+
+- name: "include role for sys-timer for {{ service_name }}"
+  include_role:
+    name: sys-timer
+  vars:
+    on_calendar: "{{ on_calendar_deploy_certificates }}"
+    service_name: "{{ CERT_SYNC_DOCKER_SERVICE_NAME }}"
+    persistent: "true"
+