No need for letsencrypt.yml to ensure Apache is running.

roles/common/tasks/letsencrypt.yml

   when: ansible_ssh_user == "vagrant"
 
 ### Back to normal
-
-- name: Start Apache
-  service: name=apache2 state=started