---
static_cert_hostnames: "{{ x509_certificate_hostnames }}"
static_cert_name: "{{ x509_certificate_name | default(static_cert_hostnames[0]) }}"

static_cert_base_dir: "/etc/ssl"

static_cert_config: "{{ x509_certificate_config }}"
# static_cert_config:
#   path: "{{ static_cert_base_dir }}/{{ static_cert_name }}"
#   mode: "0750"
#   owner: root
#   group: www-data
#   key:
#     mode: "0640"
#     owner: root
#     group: www-data
#     content: |
#       -----BEGIN RSA PRIVATE KEY-----
#       ...
#       -----END RSA PRIVATE KEY-----
#   cert:
#     mode: "0644"
#     owner: root
#     group: www-data
#     content: |
#       -----BEGIN CERTIFICATE-----
#       ...
#       -----END CERTIFICATE-----
#   chain:
#     mode: "0644"
#     owner: root
#     group: www-data
#     content: |
#       -----BEGIN CERTIFICATE-----
#       ...
#       -----END CERTIFICATE-----