---
- name: Install package
  apt:
    pkg: nginx
    state: present
- name: Create a Diffie-Hellman key exchange parameters file
  command: >
    openssl dhparam
    {% if ansible_virtualization_type == "virtualbox" %}-dsaparam{% endif %}
    -out /etc/nginx/dh-2048.pem
    2048
  args:
    creates: /etc/nginx/dh-2048.pem
  notify:
    - restart nginx
- name: Allow HTTP and HTTPS
  ufw:
    rule: allow
    name: '{{ item }}'
  with_items:
    - Nginx HTTP
    - Nginx HTTPS
  tags: [ufw]
...