testing

roles/proxy/tasks/main.yml

@@ -62,6 +62,7 @@
   file:
     path: /etc/letsencrypt/renewal-hooks/post
     state: directory
+  when: proxy.production is defined and proxy.production
 
 - name: Install nginx post renewal hook
   copy:

roles/proxy/templates/server-nginx.conf.j2

@@ -1,3 +1,11 @@
+{% if item.https is not defined or item.https %}
+server {
+    listen 80;
+
+    server_name {{ item.domain }};
+    return 301 https://{{ item.domain }}$request_uri;
+}
+{% endif %}
 server {
   listen              443 ssl;
   server_name         {{ item.domain }};