Okay, turns out we need to separate out roles

This makes a bit more sense now, I guess

playbooks/webservers.yml

@@ -62,12 +62,8 @@
         gitweb_url: "www.9iron.club"
         gitweb_webroot: "/var/www/www"
       tags: [ web, webroot, 9i ]
-    - role: gitweb
+- hosts: web1.9iron.club
-      vars:
+  roles:
-        gitweb_repo: "https://git.9iron.club/salt/desultd"
-        gitweb_url: "desu.ltd"
-        gitweb_webroot: "/var/www/desultd"
-      tags: [ web, webroot, desu ]
     - role: redirect
       vars:
         redirect_from: "otwstudios.org"
@@ -80,3 +76,11 @@
         gitweb_url: "www.otwstudios.org"
         gitweb_webroot: "/var/www/otwstudios.org"
       tags: [ web, webroot, otw ]
+- hosts: web1.9iron.club
+  roles:
+    - role: gitweb
+      vars:
+        gitweb_repo: "https://git.9iron.club/salt/desultd"
+        gitweb_url: "desu.ltd"
+        gitweb_webroot: "/var/www/desultd"
+      tags: [ web, webroot, desu ]

roles/gitweb/tasks/main.yml

@@ -25,6 +25,9 @@
             cmd: "a2ensite {{ gitweb_url }}.conf"
             creates: "/etc/apache2/sites-enabled/{{ gitweb_url }}.conf"
           notify: restart apache
+    - name: Debug site name
+      debug:
+        msg: "{{ gitweb_url }} at {{ gitweb_webroot }} from {{ gitweb_repo }}"
     - name: Generate certificate
       include_role:
         name: https

roles/https/tasks/main.yml

@@ -3,6 +3,9 @@
 ---
 - name: "Register certificate for {{ website_url }}"
   block:
+    - name: Debug info
+      debug:
+        msg: "Installing cert for {{ website_url }}"
     - name: Install SSL-required packages
       apt:
         name: python3-openssl