#!/usr/bin/env ansible-playbook --- - hosts: all roles: - generate-cert vars: directory: /etc/nginx/certs/ cname: example.com - hosts: all tasks: Copy the CA certificate to remote host, for mutual SSL auth for instance - name: copy: content: "{{ ca_cert }}" dest: /etc/nginx/certs/ca.crt