certbot für mumble dazu

playbooks/roles/certbot/defaults/main.yaml

@@ -0,0 +1 @@
+certbot__http_01_port: 31820

playbooks/roles/certbot/meta/argument_specs.yaml

@@ -19,3 +19,10 @@ argument_specs:
         type: list
         elements: str
         required: true
+      certbot__http_01_port:
+        description: |
+          The port number the bot listens on. Must be 80 if directly exposed to the internet.
+          Default is 31820 for the public-reverse-proxy setup.
+        type: str
+        required: false
+        default: 31820

playbooks/roles/certbot/tasks/main/cert.yaml

@@ -6,7 +6,7 @@
   register: certbot__cert_expiry_before
 
 - name: obtain the certificate using certbot
-  ansible.builtin.command: /usr/bin/certbot certonly --keep-until-expiring --agree-tos --non-interactive --email "{{ certbot__acme_account_email_address }}" --no-eff-email --standalone --http-01-port 31820 -d "{{ item }}"
+  ansible.builtin.command: /usr/bin/certbot certonly --keep-until-expiring --agree-tos --non-interactive --email "{{ certbot__acme_account_email_address }}" --no-eff-email --standalone --http-01-port "{{ certbot__http_01_port }}" -d "{{ item }}"
   become: true
   changed_when: false