ansible/roles/generate-cert/defaults/main.yml

7 lines
165 B
YAML

---
key_usage:
- digitalSignature
- keyEncipherment
validity_duration: "+365d"
time_before_expiration_for_renewal: "+30d" # need a better name
force_renewal: no