---
- name: Ensure Certbot and Nginx plugin are installed
  ansible.builtin.apt:
    name:
      - certbot
      - python3-certbot-nginx
    state: present

- name: Ensure certbot renewal timer is enabled and active
  ansible.builtin.systemd:
    name: certbot.timer
    enabled: true
    state: started

- name: Verify primary domain TLS certificate exists
  ansible.builtin.stat:
    path: "/etc/letsencrypt/live/{{ primary_domain }}/fullchain.pem"
  register: primary_cert

- name: Verify SearXNG domain TLS certificate exists
  ansible.builtin.stat:
    path: "/etc/letsencrypt/live/{{ searxng_domain }}/fullchain.pem"
  register: searxng_cert