---
# enable version check for this role? (true is recomended)
submodules_versioncheck: false

nginx_sites: {}

# nginx_sites:
#  - name: 'example.org'                  # required
#    altnames:                            # Optional alternative names
#      - 'www.example.org'
#      - 'ftp.example.org'
#    logging: false                       # Optional enable nginx logging
#    robots: 'robots_allow_all.txt'       # Optional, unimplemented
#    htaccess: 'htpasswd.example.org'     # Optional, unimplemented
#    webroot:                             # Optional, for use with 'webhost' role
#       path                              # Optional, for use with 'webhost' role
#       user                              # Optional, for use with 'webhost' role
#       group                             # Optional, for use with 'webhost' role
#       mode                              # Optional, for use with 'webhost' role

nginx__snippet_path: 'files/nginx/snippets/'
nginx__snippet_files:
  - 'acmetool.snippet.conf'
  - 'tls_parameters.snippet.conf'


# default_robots_file: 'robots_disallow_all.txt'

# nginx logging default for all sites
nginx__default_enable_logging: false

nginx__dhparam_size: 4096

nxinx__state: 'present'

# disable it if you do not want a autogenerated infrastructure domain config
nginx__infrastructure_domain__enabled: true

# disable this variable if you don't want to use our acmetool role to manage tls certificates
nginx__acmetool_enabled: true

nginx__user: 'www-data'
nginx__group: 'www-data'