cacert/defaults/main.yaml

cacert_ssl_gen_path: "/tmp/cacert"
cacert_ca_name: "myCA"
cacert_ca_trust_anchors_update: False

#cacert_ca_copy_to:
#  - { host: "host-1", path: "/tmp" }
#
#cacert_certs:
#  - name: example1.com
#    dest:
#      - { host: "host-1", path: "/tmp" }
#      - { host: "host-1", name: "newname", path: "/tmp", concat: "pem" }
#  - name: example2.com
#    dest:
#      - { host: "host-1", path: "/tmp" }