fix dhparams generation for the nginx role (#75)

* fix dhparams generation

Signed-off-by: kogeler <kogeler@gmail.com>

* fix

* fix galaxy version

---------

Signed-off-by: kogeler <kogeler@gmail.com>

galaxy.yml

@@ -8,7 +8,7 @@ namespace: paritytech
 name: chain
 
 # The version of the collection. Must be compatible with semantic versioning
-version: 1.10.0
+version: 1.10.1
 
 # The path to the Markdown (.md) readme file. This path is relative to the root of the collection
 readme: README.md

roles/nginx/handlers/main.yml

@@ -5,3 +5,4 @@
     state: reloaded
     enabled: true
     daemon_reload: true
+  ignore_errors: "{{ ansible_check_mode }}"

roles/nginx/tasks/main.yml

@@ -52,26 +52,16 @@
         path: /etc/nginx/dhparams.pem
       register: stat_dhparams
 
-    # The file is generated locally because it takes a LONG time to generate on VMs
-    - name: nginx | generate dhparams locally
-      become: false
+    - name: nginx | generate dhparams
       community.crypto.openssl_dhparam:
-        path: /tmp/dhparams_{{ inventory_hostname }}.pem
+        path:  /etc/nginx/dhparams.pem
         size: "{{ nginx_dhparam_size }}"
-      delegate_to: localhost
-      when: not stat_dhparams.stat.exists
-      # molecule skip test
-      tags: molecule-notest
-
-    - name: nginx | copy dhparams to node
-      ansible.builtin.copy:
-        src: /tmp/dhparams_{{ inventory_hostname }}.pem
-        dest: /etc/nginx/dhparams.pem
         owner: root
         group: root
         mode: "0600"
       notify: reload nginx config
       when: not stat_dhparams.stat.exists
+      ignore_errors: "{{ ansible_check_mode }}"
       # molecule skip test
       tags: molecule-notest