---
- name: Install packages
  apt:
    pkg: '{{ item }}'
    state: present
  with_items:
    - nginx
  tags: [packages]
- name: Disable default site
  file:
    path: /etc/nginx/sites-enabled/default
    state: absent
  notify:
    - restart nginx
- name: Create a Diffie-Hellman key exchange parameters file
  command: >
    openssl dhparam
    {% if ansible_virtualization_type == "virtualbox" %}-dsaparam{% endif %}
    -out /etc/nginx/dh-2048.pem
    2048
  args:
    creates: /etc/nginx/dh-2048.pem
  notify:
    - restart nginx
- name: Allow HTTP and HTTPS
  ufw:
    rule: allow
    name: '{{ item }}'
  with_items:
    - Nginx HTTP
    - Nginx HTTPS
  tags: [ufw]
...