---

# create self-signed certificates

- name: "Create private key (RSA, 4096 bits)"
  community.crypto.openssl_privatekey:
    path: /etc/ssl/privatekey.pem
  become: true

- name: "Create simple self-signed certificate"
  community.crypto.x509_certificate:
    path: /etc/ssl/selfsigned.pem
    privatekey_path: /etc/ssl/privatekey.pem
    provider: selfsigned
  become: true