---
gitea_web_username: "{% if gitea_web_install == 'httpd' %}apache{% else %}{{ gitea_web_install }}{% endif %}"
# Certs issued by FreeIPA Only
ipa_getcert_requested_hostnames:
  - name: "{{ ansible_fqdn }}"
    owner: "{{ gitea_web_username }}"
    key_location: "/etc/pki/tls/private/{{ gitea_basename }}.key"
    cert_location: "/etc/pki/tls/certs/{{ gitea_basename }}.crt"
    postcmd: "/bin/systemctl reload httpd"
    cnames:
      - "{{ gitea_basename }}"
...