Make sure that the bootstrap key is accessible.

    cmd: openssl genrsa -out /var/ssl/site.key 4096

    creates: /var/ssl/site.key

- name: Make sure the private key is accessible

  file:

    mode: 0o0644

    path: /var/ssl/site.key

    state: file

- name: Create SSL certificate

  command:

    cmd: >-