Allow to deactivate letsencrypt certs, i.e. while DNS is not available yet

tasks/buildcerts.yml

@@ -7,5 +7,6 @@
     dest='/etc/haproxy/certs/{{ item.domain }}.pem'
     regexp='(fullchain)|(privkey)\.pem'
   with_items: '{{ proxy_certificates_letsencrypt|default([]) }}'
+  when: item.active|default(true)
   notify:
     - "Restart HAProxy"

tasks/main.yml

@@ -20,6 +20,7 @@
     with_items: '{{ proxy_certificates_letsencrypt|default([]) }}'
     loop_control:
       loop_var: domain
+    when: domain.active|default(true)
 
   - name: "Renew Existing Cert"
     include: '../../letsencrypt/tasks/renew.yml'