cloud-nginx/defaults/main.yml
2023-08-26 21:56:47 +02:00

77 lines
2.2 KiB
YAML
Executable File

---
cloud_apps: /opt
cloud_storage: /opt/storage
cloud_stage: prod
cloud_update: false
www_root: /var/www
www_group: www-data
web_sites: []
# - domain: my-domain.tld
# filetag: file.my-domain.tld
# state: present
# stream: false
# owner: user
# port: 80
# port_option: ""
# root: "{{ www_root }}/my-domain.tld"
# root_setup: True
# index:
# - index.html
# - index.htm
# - index.php
# locations:
# - location: "/"
# options: "try_files $uri $uri/ =404;"
# options:
# access_log: "/var/log/nginx/my-domain-access.log"
# option_key: "option_value"
# add_header:
# - Referrer-Policy \"no-referrer\" always
# - someother header
# pre_options: ""
# post_options: ""
nginx_conf_http: []
nginx_conf: []
nginx_worker_count: 768
nginx_pid: /run/nginx.pid
nginx_log_path: /var/log/nginx
nginx_gzip: true
letsencrypt_mail_address: admin@my-domain.tld
letsencrypt_renewal_scripts: []
# - name: "copy_to_coturn_folder"
# type: "deploy"
# content: |
# #!/bin/sh
# set -e
# for domain in $RENEWED_DOMAINS; do
# case $domain in
# example.com)
# daemon_cert_root=/etc/coturn/certs
# # Make sure the certificate and private key files are
# # never world readable, even just for an instant while
# # we're copying them into daemon_cert_root.
# umask 077
# cp "$RENEWED_LINEAGE/fullchain.pem" "$daemon_cert_root/$domain.cert"
# cp "$RENEWED_LINEAGE/privkey.pem" "$daemon_cert_root/$domain.key"
# # Apply the proper file ownership and permissions for
# # the daemon to read its certificate and key.
# chown turnserver "$daemon_cert_root/$domain.cert" \
# "$daemon_cert_root/$domain.key"
# chmod 400 "$daemon_cert_root/$domain.cert" \
# "$daemon_cert_root/$domain.key"
# service coturn restart >/dev/null
# ;;
# esac
# done