take public ip instead of hardcoded

roles/reverse_proxy/tasks/main.yaml

@@ -16,7 +16,7 @@
                                       '$protocol $status $bytes_sent $bytes_received '
                                       '$session_time';
                 server {
-                    listen 150.217.18.45:443;
+                    listen {{ public_ip }}:443;
                     ssl_preread on;
                     proxy_pass $name;
                     access_log /var/log/nginx/stream_443.log stream_routing;

web_ca.yaml

@@ -12,6 +12,9 @@
   roles:
     - role: dns_record
     - role: reverse_proxy
+    - role: nginx
+      config_name: "ca"
+      server_fqdn: "ca.lilik.it"
 - hosts: status
   roles:
     - role: icinga2-monitoring