- name: Copy acme challenge conf
  template:
    src: templates/nginx.conf.j2
    dest: /etc/nginx/letsencrypt.conf
    owner: root
    group: root
    mode: "644"