Ansible tasks for running service/system

[Liblor]

• replace certificates
• update hosts (and reboot if the kernel is updated without downtime)
  ...

Since parts are used in the initial setup anyway we could use tags to limit tasks:
ansible-playbook site.yml -i production --tags update