Add an option to configure custom SSL certificate for st2web/nginx

[arm4b]

Closes #132

Add 2 new vars for st2web role: st2web_ssl_certificate and st2web_ssl_certificate_key.
If both vars are provided, - save the cert. If not provided, - generate self-signed certificate as it was before.

The default behavior remains as before: generting self-signed cert for st2web UI,

Example usage

- name: Install StackStorm
  hosts: all
  roles:
    ...
    - name: Install st2web
      role: st2web
      vars:
        st2web_ssl_certificate: "{{ lookup('file', 'local/path/to/domain-name.crt') }}"
        st2web_ssl_certificate_key: "{{ lookup('file', 'local/path/to/domain-name.key') }}"

TODO

• Verify for real with a custom cert

[lakshmi-kannan]

@armab This would all be simple if ansible-st2 would allow galaxy imports so we could just use jdauphant's SSL role.

[lakshmi-kannan]

I'd explicitly set the owner and group just to be clear.

[arm4b]

Makes sense.
Now wondering what user:group should it be.

Hmm, root:root or something different including mode, example: https://superuser.com/a/556496

[arm4b]

Changed in e442ebf

[lakshmi-kannan]

Wouldn't this generate a new cert every time ansible is run? You may want to stat the file and check if the .crt and .key exist before regeneration.

[arm4b]

It has creates arg below, so should be good.

[bigmstone]

👍