# kompetenzbolzen.stuff.signed_certificate

## CA Settings

```
---
cert_name: '{{ ansible_facts.fqdn }}'
common_name: '{{ ansible_facts.fqdn }}'
key_path: '/etc/ssl/private/'
cert_path: '/etc/ssl/certs/'
alt_name: '{{  "DNS:" + ansible_facts.fqdn  }}'
owner: root
group: ssl-cert

signed_certificate:
  issuer_cn: ''
  renew_at: '+5d'
  valid_for: '+30d'
  privkey_path: '/invalid'
  privkey_passphrase: ''
  cert_content: ''

use_acme: false

acme:
  directory: https://acme-v01.api.letsencrypt.org/directory
  renew_at: 10
  account_email: mail@example.com
  account_key: 'INVALID'
  gandi:
    api_key: ''
    domain: ''
```