* Auto-add --tls-san={{ api_endpoint }} when it differs from ansible_hostname * Ensures first server generates certificate with all required SANs * Add .ansible/ and PR_DESCRIPTION.md to gitignore Signed-off-by: Guillaume Andre <mail@guillaumea.fr>