From 1be153902c74fa122b7dd41c5326193a0a6acd25 Mon Sep 17 00:00:00 2001
From: AnsibleGuy <guy@ansibleguy.net>
Date: Sat, 25 Mar 2023 22:06:50 +0100
Subject: [PATCH] lint fixes

---
 tasks/debian/letsencrypt/cert.yml | 1 +
 tasks/debian/letsencrypt/main.yml | 3 +++
 2 files changed, 4 insertions(+)

diff --git a/tasks/debian/letsencrypt/cert.yml b/tasks/debian/letsencrypt/cert.yml
index 99dd0ad..7dc2da4 100644
--- a/tasks/debian/letsencrypt/cert.yml
+++ b/tasks/debian/letsencrypt/cert.yml
@@ -58,6 +58,7 @@
     {% for domain in le_cert.domains %}{% if domain | valid_hostname %}--domain {{ domain }} {% endif %}{% endfor %}
     {% if le_cert.email is not none %}--email {{ le_cert.email }} {% else %}--email {{ CERT_CONFIG.cert.email }} {% endif %}"
   when: le_changed
+  changed_when: false
 
 - name: "Certificates | Debian | LetsEncrypt Certbot | {{ le_name }} | Adding dummy certs"
   ansible.builtin.include_tasks: test.yml
diff --git a/tasks/debian/letsencrypt/main.yml b/tasks/debian/letsencrypt/main.yml
index ff7b9f1..e0b6fca 100644
--- a/tasks/debian/letsencrypt/main.yml
+++ b/tasks/debian/letsencrypt/main.yml
@@ -48,6 +48,7 @@
 # todo: task gets stuck
 - name: Certificates | Debian | LetsEncrypt Certbot | Revoking certificates
   ansible.builtin.command: "certbot revoke --cert-name {{ le_name }}{% if debug or testing %} --staging{% endif %}"
+  changed_when: false
   when:
     - le_cert.state != 'present'
     - existing_certs_raw.stdout.find(le_name) != -1
@@ -60,6 +61,7 @@
 
 - name: Certificates | Debian | LetsEncrypt Certbot | Deleting certificates
   ansible.builtin.command: "certbot delete --cert-name {{ le_name }}{% if debug or testing %} --staging{% endif %}"
+  changed_when: false
   when:
     - le_cert.state != 'present'
     - existing_certs_raw.stdout.find(le_name) != -1
@@ -100,4 +102,5 @@
 - name: Certificates | Debian | LetsEncrypt Certbot | Running renewal
   ansible.builtin.command: "certbot renew --force-renewal{% if debug or testing %} --staging{% endif %}"
   when: CERT_CONFIG.letsencrypt.renew
+  changed_when: false
   ignore_errors: true