---
ipa_getcert_requested_hostnames:
  - name: "{{ ansible_fqdn }}"
    owner: "{{ cert_owner }}"
    key_location: "/etc/pki/tls/private/{{ ansible_fqdn }}.key"
    cert_location: "/etc/pki/tls/certs/{{ ansible_fqdn }}.crt"
    postcmd: "/bin/systemctl reload httpd"
    cnames:
      - "{{ gerrit_config_canonical_domain }}"
...