[ req ]
prompt                 = no
days                   = 365
distinguished_name     = {{ rproxy_service_name }}.{{ domain.stdout }}
req_extensions         = v3_req


[ {{  rproxy_service_name  }}.{{ domain.stdout }} ]
countryName            = RU
stateOrProvinceName    = RU
localityName           = MSK
organizationName       = {{ domain.stdout }}
organizationalUnitName = IT
commonName             = {{ rproxy_service_name }}.{{ domain.stdout }}
emailAddress           = admin@{{ domain.stdout }}

[ v3_req ]
basicConstraints       = CA:false
extendedKeyUsage       = serverAuth
subjectAltName         = @sans

[sans]
DNS.1 = *.{{ domain.stdout }}
IP.1 = {{ rproxy_service_address }}