acme_config_dir: /etc/ssl
acme_config_file: "{{ acme_config_dir }}/acme.yml"
acme_keys_dir: "{{ acme_config_dir }}/private"
acme_csr_dir: "{{ acme_config_dir }}/csr"
acme_certs_dir: "{{ acme_config_dir }}/certs"
acme_accounts_dir: "{{ acme_config_dir }}/accounts"
acme_script_dir: /opt/acme
acme_script_bin: /usr/local/bin/acme-renew-cert

acme_ssl_group: ssl-cert
acme_config:
  account:
    private_key: "{{ acme_accounts_dir }}/acme_account.key"
    email: acme@example.com
    owner: root
    group: root
  directory_url: https://acme-staging-v02.api.letsencrypt.org/directory
  challenge_dir: /var/www/acme/.well-known/acme-challenge
  domains:
    example.com:
      alt_names: 
        - test.example.com
      owner: root
      group: "{{ acme_ssl_group }}"
      remaining_days: 30
      hooks:
        - systemctl reload nginx