---
java_keystore_use_default: False
java_default_keystore: '{{ jdk_java_home }}/jre/lib/security/cacerts'
java_keystore_dir: "{{ pki_dir | default('/etc/pki') }}/jdk"
#java_keystore_file: '{{ java_default_keystore }}'
java_keystore_file: '{{ java_keystore_dir }}/java.jks'
java_keytool_bin: '{{ jdk_java_home }}/jre/bin/keytool'

#java_keystore_certs_list: []
java_keystore_cert_alias: '{{ ansible_fqdn }}'
# This is the default java password. No need to hide it.
# Change it inside a vault file if you need something good
java_keystore_pwd: changeit
java_keystore_letsencrypt_trusted_ca: identrustdstx3
java_import_letsencrypt_cert: True