dotfiles/ansible/playbooks/lets_encrypt/renew-certs

#!/bin/sh
{% for tld in lets_encrypt_tlds %}
certbot renew --cert-name {{ tld }} --webroot -w /var/lib/letsencrypt/ --post-hook "systemctl reload nginx"
{% endfor %}