Make sure that the bootstrap key is accessible.

roles/debian_server/tasks/main.yml

@@ -135,6 +135,12 @@
     cmd: openssl genrsa -out /var/ssl/site.key 4096
     creates: /var/ssl/site.key
 
+- name: Make sure the private key is accessible
+  file:
+    mode: 0o0644
+    path: /var/ssl/site.key
+    state: file
+
 - name: Create SSL certificate
   command:
     cmd: >-