Make cert location configurable for nginx site

This is slight hack that I want to fix in the future. It is motivated by
the fact that the certbot certificate is valid for all domains that are
requested, instead of a certificate-per-domain.

roles/nginx/tasks/main.yml

@@ -30,6 +30,7 @@
   vars:
     site_name: "{{ item['name'] }}"
     site_port: "{{ item['port'] }}"
+    site_cert: "{{ item['cert'] }}"
 
 - name: Disable default nginx site
   ansible.builtin.file:

roles/nginx/templates/nginx-server.j2

@@ -1,12 +1,12 @@
 # {{ ansible_managed }}
 server {
-  listen 443 ssl;
+  listen 443 ssl http2;
-  listen [::]:443 ssl;
+  listen [::]:443 ssl http2;
 
   server_name {{ site_name }};
 
-  ssl_certificate {{ nginx_certificate_path }}/{{ site_name }}/fullchain.pem;
+  ssl_certificate {{ nginx_certificate_path }}/{{ site_cert }}/fullchain.pem;
-  ssl_certificate_key {{ nginx_certificate_path }}/{{ site_name }}/privkey.pem;
+  ssl_certificate_key {{ nginx_certificate_path }}/{{ site_cert }}/privkey.pem;
 
 {% if auth %}
   auth_basic "SCE";