I refactored the lego stuff before and did not fix this

ansible/roles/nginx/tasks/main.yaml

@@ -32,6 +32,27 @@
   notify: Restart nginx
   when: nginx_ssl_enabled
 
+- name: Copy SSL certificate into place for SSL enabled nginx server
+  copy:
+    src: /root/.lego/certificates/{{ inventory_hostname }}.crt
+    dest: /etc/nginx/ssl/{{ inventory_hostname }}.crt
+    owner: nginx
+    group: nginx
+    mode: 0600
+    remote_src: true
+  when: nginx_ssl_enabled
+
+- name: Copy SSL key into place for SSL enabled nginx server
+  copy:
+    src: /root/.lego/certificates/{{ inventory_hostname }}.key
+    dest: /etc/nginx/ssl/{{ inventory_hostname }}.key
+    owner: nginx
+    group: nginx
+    mode: 0600
+    remote_src: true
+  when: nginx_ssl_enabled
+
+
 - name: Create web root
   file:
     path: /srv/http/{{ inventory_hostname }}/html