---

- block:
  - name: Configure https vhosts
    template: src=vhost.conf.j2 dest={{ nginx_confd_path }}/{{ item.domain_name }}.conf mode=0644 owner=root group=root
    loop: "{{ nginx_vhosts }}"
    notify:
      - reload nginx

  - name: Download 4096-bit RFC 7919 dhparams
    get_url:
      url: https://raw.githubusercontent.com/internetstandards/dhe_groups/master/ffdhe4096.pem
      checksum: sha256:64852d6890ff9e62eecd1ee89c72af9af244dfef5b853bcedea3dfd7aade22b3
      dest: "{{ nginx_ssl_dhparam }}"
    notify:
      - reload nginx

  - name: Create vhost document roots
    file: path={{ nginx_root_prefix }}/{{ item.domain_name }} state=directory mode=0755 owner=nginx group=nginx
    loop: "{{ nginx_vhosts }}"
  tags: nginx

# vim: set ts=2 sw=2: