use command instead of shell when no shell functionality is required

3 years ago · 8b66ba059b
parent b8e4ece8a7
commit 8b66ba059b
1 changed files with 1 additions and 1 deletions
--- a/roles/mail_certificates/tasks/main.yml
+++ b/roles/mail_certificates/tasks/main.yml
@ -24,5 +24,5 @@
  register: certbot_config

 - name: Generate new certificates if the configuration changed
-  shell: "certbot certonly --non-interactive --config /etc/letsencrypt/conf.d/{{ certbot.certname }}.ini"
+  command: "certbot certonly --non-interactive --config /etc/letsencrypt/conf.d/{{ certbot.certname }}.ini"
  when: certbot_config.changed