extend existing certificate list instead of overwriting it. Ansible realy needs a deep merge...

defaults/main.yml

@@ -1,4 +1,3 @@
-
 nginx:
   add_headers: []
   real_ip_from:

meta/main.yml

@@ -1,4 +1,3 @@
 ---
 dependencies:
   - { role: monitoring, when: nginx.monitoring }
-  - certificates

tasks/main.yml

@@ -1,4 +1,14 @@
 ---
+- set_fact:
+    nginx_certs: "{{ nginx.vhosts|nginx_vhosts_to_certificates }}"
+    inventory_certs: "{{ certificates.certs|d({}) }}"
+
+- include_role:
+    name: certificates
+  vars:
+    certificates:
+      certs: "{{ {}|combine(nginx_certs, inventory_certs, recursive=True) }}"
+
 - name: install nginx
   apt: pkg=nginx
   notify:

vars/main.yml

@@ -3,6 +3,3 @@ monitoring:
   checks:
     local:
       nginx_status: {}
-
-certificates:
-  certs: "{{ nginx.vhosts|nginx_vhosts_to_certificates }}"