ansible-role-nextcloud/tasks/certificate.yml

---

- import_role:
    name: certificate
  vars:
    certificate_name: "{{nextcloud_server_names|first}}"
    certificate_common_name: "{{nextcloud_server_names|first}}"
    certificate_directory: /etc/ssl
    certificate_key_usage:
      - digitalSignature
      - keyEncipherment
    certificate_extended_key_usage:
      - serverAuth
    certificate_alt_names: "{{ nextcloud_server_names | map('regex_replace', '^(.*)$','DNS:\\1') | list }}"