Don't bounce Apache unless we actually need to.

roles/common/files/letsencrypt-gencert

@@ -1,4 +1,5 @@
 #!/bin/bash
+service apache2 stop
 d="$1"
 for i in www mail autoconfig read news cloud git; do
   if (getent hosts $i.$1 > /dev/null); then

roles/common/tasks/letsencrypt.yml

@@ -33,9 +33,6 @@
 - name: Create live directory for LetsEncrypt cron job
   file: state=directory path=/etc/letsencrypt/live group=root owner=root
 
-- name: Stop Apache
-  service: name=apache2 state=stopped
-
 - name: Get an SSL certificate for {{ domain }} from Let's Encrypt
   script: letsencrypt-gencert {{ domain }} creates=/etc/letsencrypt/live/{{ domain }}/privkey.pem
   when: ansible_ssh_user != "vagrant"