---
- name: "Create self-signed SSL cert"
  shell:
    cmd: |
      ssl_hostname="{{ ansible_nodename }}.{{ fqdn }}"
      if [ ! -f "/etc/ssl/certs/${ssl_hostname}.crt" ] && [ ! -f "/etc/ssl/private/${ssl_hostname}.key" ]; then
          openssl req -x509 -nodes -sha256 -days 3650 -newkey rsa:4096 -keyout "/tmp/${ssl_hostname}.key" -out "/tmp/${ssl_hostname}.crt" <<EOF
      US
      New Jersey
      Basking Ridge
      Verizon Wireless
      Verizon Cloud Platform
      ${ssl_hostname}
      carlos.konstanski@verizonwireless.com
      EOF
          cp -f "/tmp/${ssl_hostname}.crt" "/etc/ssl/certs/"
          cp -f "/tmp/${ssl_hostname}.key" "/etc/ssl/private/"
          chmod 644 "/etc/ssl/certs/${ssl_hostname}.crt"
          chown root: "/etc/ssl/certs/${ssl_hostname}.crt"
          chmod 640 "/etc/ssl/private/${ssl_hostname}.key"
          chown root:ssl-cert "/etc/ssl/private/${ssl_hostname}.key"
      fi
  args:
    executable: /bin/bash