server_fqdn: {{ ansible_hostname }}.{{ domain }} specification in
defaults/main.yaml

- TLSv1.3 mandatory

- Pushed routes not hardcoded but defined by `routes` list

- TLS Private Key ED25519 instead of RSA

- Signing request refactored

- Topology switched from `net30` to `subnet`

- Ready for separated user and server CA

- Server certificate validity is assessed

- `tls_int` and `packages` tags added.

move debug messages from roles in task ca-dialog