roles/nginx/tasks/main.yml

@@ -30,7 +30,6 @@
   vars:
     site_name: "{{ item['name'] }}"
     site_port: "{{ item['port'] }}"
-    site_cert: "{{ item['cert'] }}"
 
 - name: Disable default nginx site
   ansible.builtin.file:

roles/nginx/templates/nginx-server.j2

@@ -1,12 +1,12 @@
 # {{ ansible_managed }}
 server {
-  listen 443 ssl http2;
-  listen [::]:443 ssl http2;
+  listen 443 ssl;
+  listen [::]:443 ssl;
 
   server_name {{ site_name }};
 
-  ssl_certificate {{ nginx_certificate_path }}/{{ site_cert }}/fullchain.pem;
-  ssl_certificate_key {{ nginx_certificate_path }}/{{ site_cert }}/privkey.pem;
+  ssl_certificate {{ nginx_certificate_path }}/{{ site_name }}/fullchain.pem;
+  ssl_certificate_key {{ nginx_certificate_path }}/{{ site_name }}/privkey.pem;
 
 {% if auth %}
   auth_basic "SCE";