Ansible playbook to configure RouterOS (CHR) with OpenVPN

Environment:
- Mikrotik CHR on a VPS (Hetzner Cloud).

What I need to get:
- working ansible (version >= 2.10) yml idempotent (can run multiple times with no errors) playbook file

What ansible should do:
- Install Certificates (CA, Server, Client)
- Start a OVPN server on standard port 1194 with local addresses pool, profile, at least one secret
- Configure Firewall and Nat so that ovpn client will be able to:
1) navigate the internet
2) reach other VPS on the local network (over a ether2 interface)

What I will provide (already configured):
- Winbox user with full permissions
- Working vlan ether1 (public network) and ether2 (private subnet)
- hostname, public IP, private IP

Doc: https://docs.ansible.com/ansible/devel/collections/community/routeros/