Add certbot role

roles/certbot/files/cli.ini

@@ -0,0 +1,12 @@
+# All flags used by the client can be configured here. Run Certbot with
+# "--help" to learn more about the available options.
+
+email = backend@hamburg.freifunk.net
+rsa-key-size = 4096
+
+authenticator = webroot
+webroot-path = /var/www/_acme-challenge
+
+agree-tos = True
+non-interactive = True
+text = True

roles/certbot/files/reload-nginx

@@ -0,0 +1,5 @@
+#!/bin/bash
+
+PATH="/bin:/usr/bin:/usr/local/bin:/sbin:/usr/sbin:/usr/local/sbin"
+
+service nginx reload