letsencrypt_certs:
  keycloak-opendev-org-main:
    # List the service name first since that determines the filename
    # and is referenced in the apache config.
    - keycloak.opendev.org
    - "{{ inventory_hostname }}"
borg_backup_excludes_extra:
  # db is backed up in dumps, don't capture live files
  - /var/lib/keycloak/db
  # backed up by streaming backup
  - /var/backups/keycloak-mariadb