29 lines
1.5 KiB
YAML
29 lines
1.5 KiB
YAML
---
|
|
# Websites served by this host. Key = domain (ServerName + certificate name).
|
|
# Without a definition the host serves one website named after inventory_hostname.
|
|
websites: "{{ {inventory_hostname: {}} }}"
|
|
|
|
# Defaults for every entry in `websites`, overridable per website.
|
|
website_site_defaults:
|
|
state: present # present | absent
|
|
aliases: [] # ServerAlias entries (string or list)
|
|
docroot: /var/www/html
|
|
use_local_ca: "{{ use_local_ca | default(false) }}" # true -> internal acme_sh_server instead of letsencrypt
|
|
check_dns: true # verify the domain reaches this host before requesting a certificate
|
|
extra_directives: "" # raw apache directives for the ssl vhost
|
|
# reverse proxy, active as soon as proxy_pass is set
|
|
proxy_pass: "" # target url, e.g. http://127.0.0.1:8080/
|
|
proxy_path: /
|
|
proxy_preserve_host: true
|
|
proxy_forwarded_headers: true # X-Forwarded-Proto/-Port
|
|
proxy_websocket: false # adds upgrade=websocket
|
|
proxy_timeout: "" # seconds
|
|
proxy_ssl_verify: true # false disables checks for https backends with self-signed certs
|
|
proxy_options: "" # further ProxyPass key=value options, e.g. "nocanon"
|
|
|
|
# Host that runs the reachability check (http://<domain>/.well-known/acme-challenge/<token>).
|
|
website_check_host: "{{ inventory_hostname }}"
|
|
website_check_timeout: 10
|
|
# Fail the play if a website could not get a certificate because the domain does not reach this host.
|
|
website_fail_without_cert: false
|