Update to 2022-03-04 18:00

roles/includes/create_selfsigned_cert.yml

@@ -2,6 +2,10 @@
 
 - name: Ensure openssl is installed
   package: name=openssl
+  when: openssl_installed is not defined
+
+- name: Mark openssl as installed
+  set_fact: openssl_installed=True
 
 - name: Create cert dir
   file: path={{ cert_path | dirname }} state=directory
@@ -17,4 +21,4 @@
     creates: "{{ cert_path }}"
 
 - name: Restrict permissions of the private key
-  file: path={{ cert_key_path }} owner={{ cert_user | default(omit) }} group={{ cert_user | default(omit) }} mode=600
+  file: path={{ cert_key_path }} owner={{ cert_user | default(omit) }} group={{ cert_group | default(omit) }} mode={{ cert_mode | default('600') }}