|
|
|
---
|
|
|
|
# Global options for configuration file
|
|
|
|
certbot_config_file_options: {}
|
|
|
|
|
|
|
|
# Certbot auto-renew cron job configuration (for certificate renewals).
|
|
|
|
certbot_auto_renew: true
|
|
|
|
certbot_auto_renew_user: "{{ lookup('env', 'USER') }}"
|
|
|
|
certbot_auto_renew_hour: 3
|
|
|
|
certbot_auto_renew_minute: 30
|
|
|
|
|
|
|
|
# To install from source (on older OSes or if you need a specific or newer
|
|
|
|
# version of Certbot), set this variable to `yes` and configure other options.
|
|
|
|
certbot_install_from_source: no
|
|
|
|
certbot_repo: https://github.com/certbot/certbot.git
|
|
|
|
certbot_version: master
|
|
|
|
certbot_keep_updated: yes
|
|
|
|
|
|
|
|
# Where to put Certbot when installing from source.
|
|
|
|
certbot_dir: /opt/certbot
|
|
|
|
|
|
|
|
# Set to true to have this role register and generate certificates for your
|
|
|
|
# domains.
|
|
|
|
certbot_handle_certs: true
|
|
|
|
|
|
|
|
# The email to register with (required).
|
|
|
|
certbot_register_email: ''
|
|
|
|
|
|
|
|
# The command to run to register with Let's Encrypt
|
|
|
|
certbot_register_command: "{{ certbot_script }} register --non-interactive --agree-tos --email {{ certbot_register_email }}"
|
|
|
|
|
|
|
|
# The domains to generate certs for
|
|
|
|
certbot_domains:
|
|
|
|
- 'example.com'
|
|
|
|
|
|
|
|
# The command to run to generate the certificates
|
|
|
|
certbot_cert_command: "{{ certbot_script }} certonly --noninteractive --standalone"
|