Ansible interprets `on` as a boolean.

Nginx needs it to be a string. Using quotes makes it explicit.