Only renew if it's not an inactive proxy

69d502e0 · jurgenhaas · 06e1e408 · 69d502e0
Commit 69d502e0 authored 8 years ago by jurgenhaas
--- a/tasks/main.yml
+++ b/tasks/main.yml
@@ -47,7 +47,7 @@
      loop_var: domain

  - include: renew.yml
-    when: letsencrypt_certs_available is defined and letsencrypt_certs_available.stat.exists
+    when: letsencrypt_certs_available is defined and letsencrypt_certs_available.stat.exists and (proxy_active is not defined or proxy_active)
    tags: 'renew'

  when: '"letsencrypt" not in excluded_roles'