---
- name: Prepare mkcert
  block:

    - name: Install mkcert
      ansible.builtin.apt:
        name: mkcert
        update_cache: true
      become: true

    - name: Install mkcert CA
      ansible.builtin.command:
        cmd: "mkcert -install"
      changed_when: false

  when: use_mkcert
  become: false