ansible_hacky_pki/roles/generate-cert/defaults/main.yml

---
key_usage:
  - digitalSignature
  - keyEncipherment
validity_duration: "+365d"
time_before_expiration_for_renewal: "+30d" # need a better name
force_renewal: no
generate a private key (for now, on remote host) 2021-09-08 20:21:02 +02:00			`---`
move key_usage var to defaults 2021-09-09 20:27:24 +02:00			`key_usage:`
			`- digitalSignature`
			`- keyEncipherment`
sign the certificate 2021-09-09 21:45:03 +02:00			`validity_duration: "+365d"`
make the role indempotant with cert renewal 2021-09-11 16:39:42 +02:00			`time_before_expiration_for_renewal: "+30d" # need a better name`
			`force_renewal: no`