tls paranoid
tls_verify_certificate yes
tls_private_key {{ tls_private }}/{{ inventory_hostname }}.key
tls_certificate {{ tls_certs }}/{{ inventory_hostname }}.crt
tls_ca_certificate {{ tls_certs }}/ca.crt