update
enable ssl and switch to ssl-only
add vars for cert
add new section
add new section for tasks