diff -r 652a236229c2 -r bd34ae082697 roles/nginx/base/tasks/certbot.yaml
--- /dev/null	Thu Jan 01 00:00:00 1970 +0000
+++ b/roles/nginx/base/tasks/certbot.yaml	Tue Jan 01 21:57:11 2019 -0600
@@ -0,0 +1,12 @@
+---
+
+# https://certbot.eff.org/lets-encrypt/ubuntuxenial-nginx
+
+- name: add certbot (letsencrypt) repo
+  become: yes
+  apt_repository: repo="ppa:certbot/certbot"
+
+- name: install nginx packages
+  become: yes
+  apt: name="python-certbot-nginx"
+  notify: restart nginx