- name: generate letsencrypt account key
  openssl_privatekey:
    path: /etc/ssl/letsencrypt_account.key
    size: 4096
    owner: root
    group: root
    mode: 0600