- name: install certbot
  pacman:
    name:
      - certbot-nginx
    state: present
  when: run_once_nginx_certbot is not defined

- name: configure srv-web-6-6-tls-renew.cymais.service
  template: 
    src:  srv-web-6-6-tls-renew.service.j2
    dest: /etc/systemd/system/srv-web-6-6-tls-renew.cymais.service
  notify: reload certbot service
  when: run_once_nginx_certbot is not defined

- name: "set 'service_name' to '{{ role_name }}'"
  set_fact:
    service_name: "{{ role_name }}"
  when: run_once_nginx_certbot is not defined

- name: "include role for sys-timer for {{service_name}}"
  include_role:
    name: sys-timer
  vars:
    on_calendar:  "{{on_calendar_renew_lets_encrypt_certificates}}"
    persistent:   "true"
  when: run_once_nginx_certbot is not defined

- name: run the nginx_certbot tasks once
  set_fact:
    run_once_nginx_certbot: true
  when: run_once_nginx_certbot is not defined