blob: 561cd31e98abe1c71abdc8d25074b5be6e7a2254 [file] [log] [blame]
---
# acme defaults/main.yml
#
# SPDX-FileCopyrightText: © 2020 Open Networking Foundation <support@opennetworking.org>
# SPDX-License-Identifier: Apache-2.0
acmesh_version: "2.8.6"
# base directory. subpaths "home" and "dist" will be creatd in this directory
acmesh_base_dir: "/etc/acme"
# logging directory
acmesh_log_dir: "/var/log/acme"
# directory where certificates are placed. This is shared with other roles like nginx
certificate_dir: "/etc/acme/certs"
# local user account created for acme
acmesh_username: "acme"
acmesh_groupname: "acme"
acmesh_comment: "acme.sh certificate updater"
# webroot directory for acme challenges (also used in webserver roles)
acme_challenge_dir: "/etc/acme/challenges"
# name of webserver group, for the acme_challenge_dir
webserver_groupname: "www-data"
# name of the webserver service to restart on certificate change
webserver_service: "nginx"
# configuration used with ACME protocol (LetsEncrypt)
acmesh_email: "support@opennetworking.org"
# environment vars to set when using DNS provider (usually API keys)
acmesh_dns_env_vars: []
# how long to sleep for DNS provider to add entries
acmesh_dns_sleep: 30
# List of certs to generate, see README.md for configuration
acme_certs: []