---
# Websites served by this host. Key = domain (ServerName + certificate name).
# Without a definition the host serves one website named after inventory_hostname.
websites: "{{ {inventory_hostname: {}} }}"

# Defaults for every entry in `websites`, overridable per website.
website_site_defaults:
  state: present              # present | absent
  aliases: []                 # ServerAlias entries (string or list)
  docroot: /var/www/html
  use_local_ca: "{{ use_local_ca | default(false) }}"  # true -> internal acme_sh_server instead of letsencrypt
  check_dns: true             # verify the domain reaches this host before requesting a certificate
  extra_directives: ""        # raw apache directives for the ssl vhost
  # reverse proxy, active as soon as proxy_pass is set
  proxy_pass: ""              # target url, e.g. http://127.0.0.1:8080/
  proxy_path: /
  proxy_preserve_host: true
  proxy_forwarded_headers: true   # X-Forwarded-Proto/-Port
  proxy_websocket: false          # adds upgrade=websocket
  proxy_timeout: ""               # seconds
  proxy_ssl_verify: true          # false disables checks for https backends with self-signed certs
  proxy_options: ""               # further ProxyPass key=value options, e.g. "nocanon"

# Host that runs the reachability check (http://<domain>/.well-known/acme-challenge/<token>).
website_check_host: "{{ inventory_hostname }}"
website_check_timeout: 10
# Fail the play if a website could not get a certificate because the domain does not reach this host.
website_fail_without_cert: false