nginx: Add inventory_hostname vhost for SSL certs

This allows each host with nginx to easily get some kind of SSL cert
for testing purposes or services where the CN does not matter.

Signed-off-by: Florian Pritz <bluewind@xinu.at>

roles/nginx/tasks/main.yml

@@ -40,6 +40,11 @@
   notify:
     - daemon reload
 
+- name: install inventory_hostname vhost
+  template: src=nginx-hostname-vhost.conf.j2 dest=/etc/nginx/nginx.d/nginx-hostname-vhost.conf owner=root group=root mode=644
+  notify:
+    - restart nginx
+
 - name: activate letsencrypt renewal service
   service: name=certbot-renewal.timer enabled=yes state=started
 

roles/nginx/templates/nginx-hostname-vhost.conf.j2

+server {
+    listen       80;
+    listen       [::]:80;
+    server_name  {{ inventory_hostname }};
+    root         /srv/http;
+
+    include snippets/letsencrypt.conf;
+
+	location / {
+		return 404;
+	}
+}