ansible-gitea-management/vars/common.yml

---
forgejo_web_username: "{% if forgejo_web_install == 'httpd' %}apache{% else %}{{ forgejo_web_install }}{% endif %}"
forgejo_packages: True
# Certs issued by FreeIPA Only
ipa_getcert_requested_hostnames:
  - name: "{{ ansible_fqdn }}"
    owner: "{{ forgejo_web_username }}"
    key_location: "/etc/pki/tls/private/{{ forgejo_basename }}.key"
    cert_location: "/etc/pki/tls/certs/{{ forgejo_basename }}.crt"
    postcmd: "/bin/systemctl reload httpd"
    cnames:
      - "{{ forgejo_basename }}"
...