ssl generate

- name: create ssl vhost
  template: src=ssl_vhost.conf dest=/etc/nginx/conf.d/{{ server_name }}.conf backup=yes
  notify: reload nginx


- name: create self-signed SSL cert
  command: openssl req -new -nodes -x509 -subj "/C=UK/ST=London/L=London/O=IT/CN={{server_name}}" -days 3650 -keyout /etc/nginx/ssl/server.key -out /etc/nginx/ssl/server.crt -extensions v3_ca creates=/etc/nginx/ssl/server.crt
  when: use_self_signed_cert == "yes"
  notify: reload nginx