Use port 80 for letsencrypt without HaProxy

tasks/cert.yml

@@ -2,6 +2,7 @@
 # file: roles/letsencrypt/tasks/cert.yml
 
 - set_fact: cert={{ domain.1|default(domain) }}
+- set_fact: port={{ ('proxyserver' in groups)|ternary(54321,80) }}
 
 - name: "Write Config"
   template:
@@ -30,7 +31,7 @@
       state: 'present'
 
   - name: "Install New Cert"
-    shell: /opt/letsencrypt/letsencrypt-auto certonly --expand --non-interactive --config /etc/letsencrypt/{{ cert.domain }}.ini --http-01-port 54321 --preferred-challenges http-01
+    shell: /opt/letsencrypt/letsencrypt-auto certonly --expand --non-interactive --config /etc/letsencrypt/{{ cert.domain }}.ini --http-01-port {{ port }} --preferred-challenges http-01
     ignore_errors: true
 
   - name: "Close Port"

tasks/renew.yml

 ---
 # file: roles/letsencrypt/tasks/renew.yml
 
+- set_fact: port={{ ('proxyserver' in groups)|ternary(54321,80) }}
+
 - name: "Stop services"
   service:
     name='{{ item }}'
@@ -17,7 +19,7 @@
     state: 'present'
 
 - name: "Renew Existing Certs"
-  shell: /opt/letsencrypt/letsencrypt-auto renew --non-interactive --http-01-port 54321 --preferred-challenges http-01
+  shell: /opt/letsencrypt/letsencrypt-auto renew --non-interactive --http-01-port {{ port }} --preferred-challenges http-01
   ignore_errors: true
   register: renew_result
   changed_when: "'No renewals were attempted.' not in renew_result.stdout"