pagure: move letsencrypt calls to the end so we have web config to proxy them to certgetter

Signed-off-by: Kevin Fenzi <kevin@scrye.com>

roles/pagure/frontend/tasks/main.yml

@@ -239,23 +239,6 @@
   - web
   - pagure
 
-- name: Letsencrypt for releases.stg.pagure.org
-  include_role: name=letsencrypt
-  vars:
-    site_name: releases.stg.pagure.org
-  when: env == 'pagure-staging'
-
-- name: Letsencrypt for stg.pagure.org
-  include_role: name=letsencrypt
-  vars:
-    site_name: stg.pagure.org
-  when: env == 'pagure-staging'
-
-- name: Letsencrypt for pagure.org
-  include_role: name=letsencrypt
-  vars:
-    site_name: pagure.org
-
 - name: Install the SSL cert so that we can use https
   copy: >
       src={{ private}}/files/httpd/{{ item }} dest=/etc/pki/tls/certs/{{ item }}
@@ -463,3 +446,20 @@
   notify:
     - restart apache
   when: inventory_hostname.startswith('pagure')
+
+- name: Letsencrypt for releases.stg.pagure.org
+  include_role: name=letsencrypt
+  vars:
+    site_name: releases.stg.pagure.org
+  when: env == 'pagure-staging'
+
+- name: Letsencrypt for stg.pagure.org
+  include_role: name=letsencrypt
+  vars:
+    site_name: stg.pagure.org
+  when: env == 'pagure-staging'
+
+- name: Letsencrypt for pagure.org
+  include_role: name=letsencrypt
+  vars:
+    site_name: pagure.org