system-config/inventory/service/host_vars/keycloak01.opendev.org.yaml

letsencrypt_certs:
  keycloak01-opendev-org-main:
    # List the service name first since that determines the filename
    # and is referenced in the apache config.
    - keycloak.opendev.org
    - keycloak01.opendev.org