disable random delay and fix test

handlers/main.yml

@@ -1,7 +1,7 @@
 ---
 - name: Restart lego renew
   ansible.builtin.service:
-    state: restarted
+    state: "{{ lego_renew_enabled | ternary('restarted', 'stopped', 'restarted') }}"
     daemon_reload: True
     name: lego-renew.service
   listen: __lego_restart

molecule/default/converge.yml

@@ -11,6 +11,7 @@
           - example.com
           - www.example.com
         skip_create: True
+    lego_renew_enabled: False
   pre_tasks:
     - name: Install requirements
       ansible.builtin.package:

tasks/main.yml

@@ -96,4 +96,4 @@
     name: lego-renew.timer
     daemon_reload: True
     enabled: True
-    state: started
+    state: "{{ lego_renew_enabled | ternary('started', 'stopped', 'started') }}"

templates/etc/systemd/system/lego-renew.service.j2

@@ -10,7 +10,7 @@ Type=oneshot
 EnvironmentFile={{ __lego_systemd_env }}
 
 {% for cert in lego_certificates %}
-ExecStart={{ __lego_bin_file }} --email="{{ lego_acme_account_email }}" --domains {{ ' --domains '.join(cert.domains) }} $ARGS renew {{ '--renew-hook="' + __lego_base_dir + '/hooks/' + cert.name + '.sh"' if cert.hook is defined else '' }} --days 30
+ExecStart={{ __lego_bin_file }} --email="{{ lego_acme_account_email }}" --domains {{ ' --domains '.join(cert.domains) }} $ARGS renew {{ '--renew-hook="' + __lego_base_dir + '/hooks/' + cert.name + '.sh"' if cert.hook is defined else '' }} --days 30 --no-random-sleep
 {% endfor %}
 
 [Install]