ansible-proxy/openspec/changes/archive/2026-04-29-allow-http-port-for-certbot/tasks.md

1. Implementation

• 1.1 Add UFW allow rule for port 80 in roles/trojan/tasks/main.yml before the certbot certificate provisioning step

2. Validation

• 2.1 Run ansible-playbook --syntax-check to validate playbook integrity