Per the conversation here @eliotberriot and I agreed that I would update the Ansible role to remove certbot-auto. I checked into how certbot suggests users install for both Debian and Ubuntu distros and it seems that snaps are the way to do it from both. I updated the nginx.yml task to reflect this change and have tested this successfully on my local install.