add ssl support to the nginx

ansible/roles/nginx/tasks/main.yml

@@ -4,6 +4,16 @@
   with_items:
     - nginx-full
 
+- name: Nginx | ssl private key
+  template:
+    src=key.j2
+    dest=/etc/nginx/key
+
+- name: Nginx | ssl certificate
+  template:
+    src=cert.j2
+    dest=/etc/nginx/cert
+
 - name: Nginx | nginx.conf
   template:
     src=nginx.conf.j2

ansible/roles/nginx/templates/cert.j2

@@ -0,0 +1,23 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

ansible/roles/nginx/templates/key.j2

@@ -0,0 +1,28 @@
+-----BEGIN PRIVATE KEY-----
+MIIEvgIBADANBgkqhkiG9w0BAQEFAASCBKgwggSkAgEAAoIBAQC+CrS/AtyQLqJa
+DFcGF6Z8mOrkEed/hhuoHwnqNkrhNXtWhBurR0sLuR9b3EvQ2s+yrrA4mns0Y9os
+beTHxb+ZIqTGzknMcEB/RYlE58Y2H1HxHNWZojoaJsHhWHVHLJcKOJx9+vX3mTQ9
+MU4jpjQzfwQvDGBNKpcirzEOQCadQAW4A9N7A96Ezg63Ujxszk942Yl5U0Cobtr9
+HB182dw28nDonozHNB2iSbPEDr7BK2Y3gISe9+Y7fPoSCVONuhfvGqdbMJc7a4lL
+LfQPHEqxwC6ypx94qPELEN8iiJJxgEFMavctNSsCZD0pkOp2DfGLoT5rR25mpY86
+NyIjzIZ7AgMBAAECggEBALqXUm41RhB+6UMW2J8Pu5ScpAx4k96+8wq4JwkCc7T5
+yPbiUTRzlHiXM/YCr6IKJWHgaP+6lfuTitSStc18GKonvLfCNe13zavov2WbWB8t
+00u0rvjgssGYikZSjxvp6QbNHMIJFVYc45Cth3YzKw/gx1/We/toNOqGLtk6HW/I
+h1P9G31vC+6xMyPtePcFQQCP3JhdFpLA1m2s13yoffopX630Zpm+X/b8gEwFqVw9
+nWhFyaVJ0b22lEUDx2Lqv6AN0L5sqG9EsZvGN8gTj09A0lrxoI55cGf6BAGkqE0b
+0A0dgZff1l1FO3r34ER2BkLZpsipff7HJIwMT2u7R9ECgYEA+KzQi25agrrrB07a
+5s7uQ/2oDVJ0kZTEHk5NkFMSnr7TJQwTyJD5g+CzjvdgNEF9SfAxFajAzaIFVB2C
+aDtk+7pujpCjrJiTGt+ptm26TcEp2k+dTSHySBnAguqMaC5shj5bjXXCrVOL53sy
+GUCzudPj7p5KmfhAh3++fMsbEnkCgYEAw6PBZJzIMaNhC94M2CCKth/vxs9lu1/x
+mJu+v5qNCYIicqhniAF0hAlY+WmlnKUOvGkpdrEKWLrKF+QcoUGjcHc3uoRz8csp
+jlRAW8suycEKXbaW5Q6Mfjd0txZeXm2ZG11yko7BD1xXjMkaoEGoEphzEltLgS53
+/HHfmxP1g5MCgYBxoqb50EfUDY5xHHuzlUQUFcnBrLhP/mdQYf/Xv952ZEUgXNB9
+iqI6vWfQIQL5XiPesb/8Yc0ZKry8n2+EKgAPeDYlN7tTl7VBRovLLYFBHs/9TvxW
+zvhkMkBiksPup6g4AC7eCb4YbmE0Onu+Rm7asBUsaXE1wtfaE2n8pOOOIQKBgFgF
+X0eTOocKyOj7+K9sxLv4VnsOaOkK27obqJCwSnBSuoj3t8z7Sp71TbC5laeKo7yl
+W+Bo+wy8zZw+J5tt2skI+mvSmA/bplDBG0uxeNWRIsbTFcTs7M0EymBtkfvON6qW
+Oqwxyi7NDx7qhC5CHApxyKQjqy7t51IPMdml+zo9AoGBAMQRk+9fd+mF20eO3WB/
+sxoUISagUkLKBwaQiv7FGyHcBw664j0rrP0BCZcfJpm0jAMcLC4JFKfVzfGSWRHF
+snhfyqLI/pkqQ2jg8eXdHnKXkUgyg81MVhYDKrAqEm2mmmI5y17n4iS19OYwUL4C
+0MbRAxD3hXosa9q5X4AARqkT
+-----END PRIVATE KEY-----

ansible/roles/nginx/templates/nginx.conf.j2

@@ -17,6 +17,12 @@ http {
     gzip on;
 
     server {
+        listen 80;
+        listen 443 ssl;
+
+        ssl_certificate /etc/nginx/cert;
+        ssl_certificate_key /etc/nginx/key;
+
         root /vagrant{{ relative_document_root }};
 
         index {{ index }};