# generate_cert.yml
---
- name: check if privkey exists
  ansible.builtin.command: '[ -f "/etc/letsencrypt/live/{{ item.domain }}/README" ]'
  register: result
  ignore_errors: true

- name: generate certificate
  ansible.builtin.command: 'certbot certonly --standalone --preferred-challenge http-01 -d {{ item.domain }} -m ejparker@actcur.com --agree-tos'
  when: result is failure