websites-role umgebaut

defaults/main.yml

@@ -1,3 +1,28 @@
 ---
-docroot: /var/www/html
-domainname: "{{ inventory_hostname }}"
+# Websites served by this host. Key = domain (ServerName + certificate name).
+# Without a definition the host serves one website named after inventory_hostname.
+websites: "{{ {inventory_hostname: {}} }}"
+
+# Defaults for every entry in `websites`, overridable per website.
+website_site_defaults:
+  state: present              # present | absent
+  aliases: []                 # ServerAlias entries (string or list)
+  docroot: /var/www/html
+  use_local_ca: "{{ use_local_ca | default(false) }}"  # true -> internal acme_sh_server instead of letsencrypt
+  check_dns: true             # verify the domain reaches this host before requesting a certificate
+  extra_directives: ""        # raw apache directives for the ssl vhost
+  # reverse proxy, active as soon as proxy_pass is set
+  proxy_pass: ""              # target url, e.g. http://127.0.0.1:8080/
+  proxy_path: /
+  proxy_preserve_host: true
+  proxy_forwarded_headers: true   # X-Forwarded-Proto/-Port
+  proxy_websocket: false          # adds upgrade=websocket
+  proxy_timeout: ""               # seconds
+  proxy_ssl_verify: true          # false disables checks for https backends with self-signed certs
+  proxy_options: ""               # further ProxyPass key=value options, e.g. "nocanon"
+
+# Host that runs the reachability check (http://<domain>/.well-known/acme-challenge/<token>).
+website_check_host: "{{ inventory_hostname }}"
+website_check_timeout: 10
+# Fail the play if a website could not get a certificate because the domain does not reach this host.
+website_fail_without_cert: false