skip_certification_authority: false
skip_certification_authority_webserver: false
skip_server_certificate: false
skip_server_certificate_webserver: false

ca_cert_dir: /etc/certs/
ca_cert_name: antennineCA
ca_cert_days: 3650 # ten years
ca_cert_key_pass: "{{ lookup('passwordstore', 'chiavi_antennine/openssl/antennineCA.key', errors='strict') | default(omit) }}"
ca_distinguished_name:
  C: IT
  ST: Emilia-Romagna
  L: Prunarolo
  O: Antennine
  OU: antennine.noblogs.org
  emailAddress: eno@burdig.one
  CN: Antennine CA

with_ssl: true
static_services:
  - ca:
    server_name: ca.ada
    server_root: /home/antennine/ca/

server_cert_dir: /etc/certs/ada
server_cert_name: ada
server_cert_days: 1095 # 3 years
server_cert_key_pass: "{{ lookup('passwordstore', 'chiavi_antennine/openssl/ada.key', errors='strict') | default(omit) }}"
server_distinguished_name:
  C: IT
  ST: Emilia-Romagna
  L: Prunarolo
  O: Antennine
  OU: antennine.noblogs.org
  emailAddress: eno@burdig.one
  CN: Ada