|
|
- ---
- ca_cert_ca_manager_host: 'authorities_request'
- ca_cert_common_name: '{{ host_fqdn }}'
- ca_cert_proto: 'tls'
- ca_cert_client: false
- ca_cert_min_days_validity: 30
- ca_cert_renew_private_key: true
- ca_cert_tls_subj: '{{ openssl_x509_prefix}}/OU=Server/CN={{ ca_cert_common_name }}'
- ca_cert_tls_ca_path: '/etc/ssl/root_ca.crt'
- ca_cert_tls_key_path: '/etc/ssl/{{ ca_cert_common_name }}.key'
- ca_cert_tls_key_algorithm: 'ed25519'
- ca_cert_tls_csr_path: '/etc/ssl/{{ ca_cert_common_name }}.csr'
- ca_cert_tls_cert_path: '/etc/ssl/{{ ca_cert_common_name }}.crt'
- ca_cert_ssh_ca_path: '/etc/ssh/user_ca.pub'
- ca_cert_ssh_key_path: '/etc/ssh/ssh_host_ed25519_key'
- ...
|