Git initial commit

defaults/main.yml

@@ -0,0 +1,77 @@
+---
+cloud_apps: /opt
+cloud_storage: /opt/storage
+cloud_stage: prod
+cloud_update: false
+
+www_root: /var/www
+www_group: www-data
+
+web_sites: []
+  # - domain: my-domain.tld
+  #   filetag: file.my-domain.tld
+  #   state: present
+  #   stream: false
+  #   owner: user
+  #   port: 80
+  #   port_option: ""
+  #   root: "{{ www_root }}/my-domain.tld"
+  #   root_setup: True
+  #   index:
+  #     - index.html
+  #     - index.htm
+  #     - index.php
+  #   locations:
+  #     - location: "/"
+  #       options: "try_files $uri $uri/ =404;"
+  #   options:
+  #     access_log: "/var/log/nginx/my-domain-access.log"
+  #     option_key: "option_value"
+  #   add_header:
+  #     - Referrer-Policy                      \"no-referrer\"   always
+  #     - someother header
+  #   pre_options: ""
+  #   post_options: ""
+
+nginx_conf_http: []
+nginx_conf: []
+
+nginx_worker_count: 768
+nginx_pid: /run/nginx.pid
+nginx_log_path: /var/log/nginx
+nginx_gzip: true
+
+letsencrypt_mail_address: admin@my-domain.tld
+
+letsencrypt_renewal_scripts: []
+  # - name: "copy_to_coturn_folder"
+  #   type: "deploy"
+  #   content: |
+  #     #!/bin/sh
+
+  #     set -e
+
+  #     for domain in $RENEWED_DOMAINS; do
+  #             case $domain in
+  #             example.com)
+  #                     daemon_cert_root=/etc/coturn/certs
+
+  #                     # Make sure the certificate and private key files are
+  #                     # never world readable, even just for an instant while
+  #                     # we're copying them into daemon_cert_root.
+  #                     umask 077
+
+  #                     cp "$RENEWED_LINEAGE/fullchain.pem" "$daemon_cert_root/$domain.cert"
+  #                     cp "$RENEWED_LINEAGE/privkey.pem" "$daemon_cert_root/$domain.key"
+
+  #                     # Apply the proper file ownership and permissions for
+  #                     # the daemon to read its certificate and key.
+  #                     chown turnserver "$daemon_cert_root/$domain.cert" \
+  #                             "$daemon_cert_root/$domain.key"
+  #                     chmod 400 "$daemon_cert_root/$domain.cert" \
+  #                             "$daemon_cert_root/$domain.key"
+
+  #                     service coturn restart >/dev/null
+  #                     ;;
+  #             esac
+  #     done