24 lines
645 B
YAML
24 lines
645 B
YAML
---
|
|
# Required, allowed: self-signed, letsencrypt
|
|
cert_type: 'self-signed'
|
|
|
|
# Required, name for ssl-certificate configuration
|
|
cert_name: ''
|
|
|
|
# Required: domain owner email
|
|
cert_email: ''
|
|
|
|
# Required: domains for lets encrypt certificate creation
|
|
cert_domains: []
|
|
|
|
# Paths to store generated keys
|
|
cert_directory: '/opt/ssl-certificates/{{ cert_name }}'
|
|
cert_key: '{{ cert_directory }}/ssl.key'
|
|
cert_request: '{{ cert_directory }}/ssl.csr'
|
|
cert_certificate: '{{ cert_directory }}/ssl.crt'
|
|
cert_dhparam: '{{ cert_directory }}/dhparam.pem'
|
|
cert_dhparam_n: 2048
|
|
|
|
# lets encrypt well-known challenge folder
|
|
cert_le_webroot_path: /var/www/letsencrypt
|