---
- name: allow http
  ufw:
    rule: allow
    port: '80'
    proto: tcp

- name: allow https
  ufw:
    rule: allow
    port: '443'
    proto: tcp

- name: restart ufw
  service: name=ufw state=restarted enabled=yes

- name: install nginx
  apt: name=nginx status=latest