Рабочие роли вынесены на уровень вверх

ansible/roles/ssl-certificate/templates/vhost.conf.j2

@@ -0,0 +1,13 @@
+server {
+    listen 80;
+    server_name {{ cert_domains|join(' ') }};
+
+    location /.well-known {
+        root {{ cert_le_webroot_path }};
+        try_files $uri $uri/ =404;
+    }
+
+    location / {
+        rewrite ^ https://$host$request_uri? permanent;
+    }
+}