Optimized cert speed, testing etc.

roles/nginx-https-get-cert/tasks/flavors/san.yml

@@ -20,6 +20,7 @@
     {% endif %}
     {{ '--mode-test' if mode_test | bool else '' }}
   register: certbundle_result
+  changed_when: "'Certificate not yet due for renewal' not in certbundle_result.stdout"
   when: run_once_san_certs is not defined
 
 - name: run the san tasks once

roles/nginx-https-get-cert/tasks/main.yml

@@ -27,4 +27,9 @@
 
 - name: Set fact
   set_fact:
-    ssl_cert_folder: "{{ cert_folder_result.folder }}"
+    ssl_cert_folder: "{{ cert_folder_result.folder }}"
+
+- name: Ensure ssl_cert_folder is set
+  fail:
+    msg: "No certificate folder found for domain {{ domain }}"
+  when: ssl_cert_folder is undefined or ssl_cert_folder is none