Make 'require_ssl_reuse' an option.

defaults/main.yml

@@ -30,6 +30,7 @@ vsftpd_valid_shell: '/bin/true'
 
 vsftpd_tls_enabled: True
 vsftpd_force_tls: True
+vsftpd_require_ssl_reuse: "YES"
 vsftpd_tls_letsencrypt: True
 vsftpd_ssl_ca_certificate: '{{ letsencrypt_acme_certs_dir }}/fullchain'
 vsftpd_ssl_certificate: '{{ letsencrypt_acme_certs_dir }}/cert'

templates/vsftpd.conf.j2

@@ -139,6 +139,11 @@ rsa_private_key_file={{ vsftpd_ssl_certificate_key }}
 {% if vsftpd_force_tls %}
 force_local_logins_ssl=YES
 force_local_data_ssl=YES
+{% else %}
+force_local_logins_ssl=NO
+force_local_data_ssl=NO
+{% endif %}
+require_ssl_reuse={{ vsftpd_require_ssl_reuse }}
 {% endif %}
 {% else %}
 # This option specifies the location of the RSA certificate to use for SSL