role-nginx-ssl/tasks/main.yml

---
# tasks file for nginx-ssl
- name: install nginx
  ansible.builtin.package:
    name: nginx
    state: present

- name: deploy nginx config
  ansible.builtin.copy:
    src: files/nginx.conf
    dest: /etc/nginx/nginx.conf

- name: ensure conf.d exists
  ansible.builtin.file:
    path: /etc/nginx/conf.d
    state: directory

- name: deploy service config(s)
  ansible.builtin.template:
    src: templates/server.conf
    dest: /etc/nginx/conf.d/{{ item.domain }}
  loop: "{{ domains }}"

- name: check if /etc/nginx/certs exists and is a symlink
  ansible.builtin.command: '[ -L "/etc/nginx/certs" ]'
  register: result
  ignore_errors: true

- include_tasks: create_cert.yml
  when: result is failed
  loop: "{{ domains }}"