Implemented certbot for cloudflare\hetzner, optimized documentation and solved bugs

roles/nginx-certbot/README.md

@@ -0,0 +1,33 @@
+# Nginx Certbot Automation
+
+## 🔥 Description
+
+This role automates the setup of an automatic [Let's Encrypt](https://letsencrypt.org/) certificate renewal system for Nginx using [Certbot](https://certbot.eff.org/). It ensures that SSL/TLS certificates are renewed seamlessly in the background and that Nginx reloads automatically after successful renewals.
+
+## 📖 Overview
+
+Optimized for Archlinux systems, this role installs the `certbot-nginx` package, configures a dedicated `systemd` service for certificate renewal, and integrates with a `systemd-timer` to schedule periodic renewals. After a renewal, Nginx is reloaded to apply the updated certificates immediately.
+
+### Key Features
+- **Automatic Renewal:** Schedules unattended certificate renewals using systemd-timers.
+- **Seamless Nginx Reload:** Reloads the Nginx service automatically after successful renewals.
+- **Systemd Integration:** Manages renewal operations reliably with `systemd` and `systemd-notifier`.
+- **Quiet and Safe Operation:** Uses `--quiet` and `--agree-tos` flags to ensure non-interactive renewals.
+
+## 🎯 Purpose
+
+The Nginx Certbot Automation role ensures that Let's Encrypt SSL/TLS certificates stay valid without manual intervention. It enhances the security and reliability of web services by automating certificate lifecycle management.
+
+## 🚀 Features
+
+- **Certbot-Nginx Package Installation:** Installs required certbot plugins for Nginx.
+- **Custom Systemd Service:** Configures a lightweight, dedicated renewal service.
+- **Timer Setup:** Uses systemd-timer to run certbot renewals periodically.
+- **Failure Notification:** Integrated with `systemd-notifier` for alerting on failures.
+
+## 🔗 Learn More
+
+- [Certbot Official Website](https://certbot.eff.org/)
+- [Let's Encrypt](https://letsencrypt.org/)
+- [Systemd (Wikipedia)](https://en.wikipedia.org/wiki/Systemd)
+- [HTTPS (Wikipedia)](https://en.wikipedia.org/wiki/HTTPS)

roles/nginx-certbot/meta/main.yml

@@ -1,3 +1,32 @@
+---
+galaxy_info:
+  author: "Kevin Veen-Birkenbach"
+  description: |
+    Automates Let's Encrypt SSL/TLS certificate renewals for Nginx using Certbot and systemd services with automatic reloads after successful renewals.
+  license: "CyMaIS NonCommercial License (CNCL)"
+  license_url: "https://s.veen.world/cncl"
+  company: |
+    Kevin Veen-Birkenbach
+    Consulting & Coaching Solutions
+    https://www.veen.world
+  min_ansible_version: "2.9"
+  platforms:
+    - name: Archlinux
+      versions:
+        - rolling
+  galaxy_tags:
+    - nginx
+    - certbot
+    - ssl
+    - tls
+    - letsencrypt
+    - https
+    - systemd
+    - automation
+  repository: "https://s.veen.world/cymais"
+  issue_tracker_url: "https://s.veen.world/cymaisissues"
+  documentation: "https://s.veen.world/cymais"
 dependencies:
-- nginx
-- systemd-notifier
+  - certbot
+  - nginx
+  - systemd-notifier

roles/nginx-certbot/tasks/main.yml

@@ -1,6 +1,7 @@
 - name: install certbot
   pacman:
-    name: [certbot,certbot-nginx]
+    name:
+      - certbot-nginx
     state: present
   when: run_once_nginx_certbot is not defined