made snake oil certificate option optional

README.md

@@ -29,6 +29,9 @@ maps: {}
 # force all traffic on ssl, except letsencrypt challenges
 force_ssl: True
 
+# generate a self signed certificate as default ssl cert
+snakeoil_default: False
+
 # install php-fpm, setup a php-handler upstream and copy a php location snippet to include in configs
 # either "False", "True" or a dict *phpconfig*, see below for definition
 php: False

defaults/main.yml

@@ -6,6 +6,7 @@ nginx:
   monitoring: true
   php: false
   force_ssl: true
+  snakeoil_default: false
   upstreams: {}
   vhosts: {}
   maps: {}

tasks/main.yml

@@ -8,7 +8,7 @@
     name: certificates
   vars:
     certificates:
-      certs: "{{ {}|combine(selfsigned_cert|from_yaml,  nginx_certs, inventory_certs, recursive=True) }}"
+      certs: "{{ {}|combine( (selfsigned_cert|from_yaml if nginx.snakeoil_default else {}),  nginx_certs, inventory_certs, recursive=True) }}"
 
 - debug:
     verbosity: 1