Add certificate

Deploys a Let's Encrypt certificate with certbot, using a DNS-01 or a HTTP-01 challenge.

To choose between the two, this role checks the current public IP address of the host, and compares it to the IP address that the certificate's domain publicly resolves to. It then calls sub-roles add_cert_dns_01 or add_cert_http_01 accordingly.