ansible-role-nextcloud/tasks/certificate.yml

---

- include_role:
    name: certificate
  vars:
    certificate_name: nextcloud
    certificate_directory: /etc/ssl
    certificate_key_usage:
      - digitalSignature
      - keyEncipherment
    certificate_extended_key_usage:
      - serverAuth
    certificate_alt_names: "{{ nextcloud_server_names | map('regex_replace', '(.*)','DNS:\\1') | list }}"