Add initial cert role

playbooks/roles/cert/meta/argument_specs.yml

@@ -0,0 +1,46 @@
+---
+argument_specs:
+  main:
+    short_description: Orders and renews certificates from Let's Encrypt
+    options:
+      cert__domains:
+        description: Domains for which to issue a certificate. Must be in the same DNS zone.
+        required: true
+        type: list
+        elements: str
+      cert__owner:
+        description: Owner of the certificate files.
+        required: false
+        type: str
+        default: root
+      cert__group:
+        description: Group of the certificate files.
+        required: false
+        type: str
+        default: root
+      cert__acme_account:
+        description: ACME account details
+        required: true
+        type: dict
+        options:
+          email:
+            description: E-mail address to send certificate expiary notifications to
+            required: true
+            type: str
+          key:
+            description: Private RSA or Elliptic Curve key of the ACME account
+            required: true
+            type: str
+      cert__cloudflare_dns:
+        description: Cloudflare DNS API details
+        required: true
+        type: dict
+        options:
+          api_token:
+            description: Cloudflare API token
+            required: true
+            type: str
+          zone:
+            description: DNS zone the domain is in
+            required: true
+            type: str

playbooks/roles/cert/meta/main.yml

@@ -0,0 +1,7 @@
+dependencies: # noqa meta-no-info
+  - role: distribution_check
+    vars:
+      distribution_check__supported_distributions:
+        - name: Debian
+          versions:
+            - "11"