blob: 561cd31e98abe1c71abdc8d25074b5be6e7a2254 [file] [log] [blame]
Zack Williams845c7ca2020-07-06 17:19:27 -07001---
2# acme defaults/main.yml
3#
4# SPDX-FileCopyrightText: © 2020 Open Networking Foundation <support@opennetworking.org>
5# SPDX-License-Identifier: Apache-2.0
6
7acmesh_version: "2.8.6"
8
9# base directory. subpaths "home" and "dist" will be creatd in this directory
10acmesh_base_dir: "/etc/acme"
11
12# logging directory
13acmesh_log_dir: "/var/log/acme"
14
15# directory where certificates are placed. This is shared with other roles like nginx
16certificate_dir: "/etc/acme/certs"
17
18# local user account created for acme
19acmesh_username: "acme"
20acmesh_groupname: "acme"
21acmesh_comment: "acme.sh certificate updater"
22
23# webroot directory for acme challenges (also used in webserver roles)
24acme_challenge_dir: "/etc/acme/challenges"
25
26# name of webserver group, for the acme_challenge_dir
27webserver_groupname: "www-data"
28
29# name of the webserver service to restart on certificate change
30webserver_service: "nginx"
31
32# configuration used with ACME protocol (LetsEncrypt)
33acmesh_email: "support@opennetworking.org"
34
35# environment vars to set when using DNS provider (usually API keys)
36acmesh_dns_env_vars: []
37
38# how long to sleep for DNS provider to add entries
39acmesh_dns_sleep: 30
40
41# List of certs to generate, see README.md for configuration
42acme_certs: []