{% calculate exec='/bin/bash', not exists('/etc/nginx/ssl/nginx.key') or not exists('/etc/nginx/ssl/nginx.crt') %} openssl req -x509 -subj "/CN=_" -nodes -days 365 -newkey rsa:2048 -keyout /etc/nginx/ssl/nginx.key -out /etc/nginx/ssl/nginx.crt &>/dev/null true