computer-playbook/roles/nginx-domains-cleanup/tasks/main.yml

---
- name: "Remove Nginx configuration for deprecated domains"
  ansible.builtin.command:
    cmd: >-
      rm -fv /etc/nginx/conf.d/http/servers/*.{{ item }}.conf;
      rm -fv /etc/nginx/conf.d/http/servers/{{ item }}.conf
  loop: "{{ deprecated_domains }}"
  loop_control:
    label: "{{ item }}"
  notify: restart nginx
  when:
    - mode_cleanup | bool
    - run_once_nginx_domains_cleanup is not defined

# The revoking just works for the base domain
- name: "Revoke Certbot certificate for {{ item }}"
  ansible.builtin.command:
    cmd: "certbot revoke -n --cert-name {{ item }}"
  become: true
  loop: "{{ deprecated_domains }}"
  loop_control:
    label: "{{ item }}"
  when:
    - mode_cleanup | bool
    - run_once_nginx_domains_cleanup is not defined
  ignore_errors: true

# The deleting just works for the base domain
- name: "Delete Certbot certificate for {{ item }}"
  ansible.builtin.command:
    cmd: "certbot delete -n --cert-name {{ item }}"
  become: true
  loop: "{{ deprecated_domains }}"
  loop_control:
    label: "{{ item }}"
  when:
    - mode_cleanup | bool
    - run_once_nginx_domains_cleanup is not defined
  ignore_errors: true

- name: run the nginx_domains_cleanup role once
  set_fact:
    run_once_nginx_domains_cleanup: true
  when: run_once_nginx_domains_cleanup is not defined