Ansible: Create a self signed certificate (for nginx usage or other).

tasks.yml

- name: "SSL Self-Sign: Generate RSA Key"
  openssl_privatekey: path="/etc/nginx/ssl/{{ ssl_certificate_key }}" size=4096
  become: yes
  become_user: root
  notify: reload-nginx
  tags: ssl

- name: "SSL Self-Sign: Generate Certificate Signing Request"
  openssl_csr:
    path: "/etc/nginx/ssl/ssl.csr"
    privatekey_path: "/etc/nginx/ssl/{{ ssl_certificate_key }}"
    country_name: DZ
    state_or_province_name: "Algeirs"
    organization_name: "Local Business"
    common_name: "{{ app_domain }}"
  become: yes
  become_user: root
  tags: ssl

- name: "SSL Self-Sign: Generate SSL Certificate"
  # shell: openssl x509 -req -sha256 -days 365 -in "/etc/nginx/sites-available/ssl.csr" -signkey "/etc/nginx/ssl/{{ ssl_certificate_key }}" -out "/etc/nginx/ssl/{{ ssl_certificate }}"
  openssl_certificate:
    path: "/etc/nginx/ssl/{{ ssl_certificate }}"
    privatekey_path: "/etc/nginx/ssl/{{ ssl_certificate_key }}"
    csr_path: "/etc/nginx/ssl/ssl.csr"
    provider: selfsigned
  become: yes
  become_user: root
  notify: reload-nginx
  tags: ssl

- name: "SSL Self-Sign: Remove SSL Certificate Signing Request"
  file: path=/etc/nginx/ssl/ssl.csr state=absent
  become: yes
  become_user: root
  tags: ssl